CVE-2010-4233

2010-11-1701:00:00

CWE-255

[email protected]

web.nvd.nist.gov

camtron

tecvoz

ip camera

linux

installation

default password

vulnerability

remote attackers

telnet interface

cve-2010-4233

6.8 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.0%

JSON

The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access via the TELNET interface.

CPENameOperatorVersion
camtron:cmnc-200_firmwarecamtron cmnc-200 firmwareeq1.102a-008
camtron:cmnc-200camtron cmnc-200eq*
tecvoz:cmnc-200_firmwaretecvoz cmnc-200 firmwareeq1.102a-008
tecvoz:cmnc-200tecvoz cmnc-200eq*

CPE	Name	Operator	Version
camtron:cmnc-200_firmware	camtron cmnc-200 firmware	eq	1.102a-008
camtron:cmnc-200	camtron cmnc-200	eq	*
tecvoz:cmnc-200_firmware	tecvoz cmnc-200 firmware	eq	1.102a-008
tecvoz:cmnc-200	tecvoz cmnc-200	eq	*