Hardcoded credentials

2019-12-1119:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.9%

JSON

Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account “!#/” with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.

CPENameOperatorVersion
gxv3500_firmwareeq1.0.4.11
gxv3501_firmwareeq1.0.4.11
gxv3504_firmwareeq1.0.4.11
gxv3601_firmwareeq1.0.4.11
gxv3601hd_firmwareeq1.0.4.11
gxv3601ll_firmwareeq1.0.4.11
gxv3611hd_firmwareeq1.0.4.11
gxv3611ll_firmwareeq1.0.4.11
gxv3615p_firmwareeq1.0.4.11
gxv3615w_firmwareeq1.0.4.11

Name	Operator	Version
gxv3500_firmware	eq	1.0.4.11
gxv3501_firmware	eq	1.0.4.11
gxv3504_firmware	eq	1.0.4.11
gxv3601_firmware	eq	1.0.4.11
gxv3601hd_firmware	eq	1.0.4.11
gxv3601ll_firmware	eq	1.0.4.11
gxv3611hd_firmware	eq	1.0.4.11
gxv3611ll_firmware	eq	1.0.4.11
gxv3615p_firmware	eq	1.0.4.11
gxv3615w_firmware	eq	1.0.4.11