Lucene search

[email protected]CVE-2023-30354

HistoryMay 10, 2023 - 4:15 p.m.

CVE-2023-30354

2023-05-1016:15:12

CWE-319

[email protected]

web.nvd.nist.gov

shenzen tenda

ip camera

cp3

u-boot

vulnerability

wi-fi password

hardcoded boot password

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.4%

JSON

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.

Affected configurations

NVD

Node

tendacp3_firmwareMatch11.10.00.2211041355

AND

tendacp3Match-

CPENameOperatorVersion
tenda:cp3_firmwaretenda cp3 firmwareeq11.10.00.2211041355 

CPE	Name	Operator	Version
tenda:cp3_firmware	tenda cp3 firmware	eq	11.10.00.2211041355

References

github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_NCD.md

github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_PBA.md

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.4%

JSON

Related for CVE-2023-30354

prion1 cvelist1 nvd1