Hardcoded credentials

2015-12-2703:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.2%

JSON

The Frontel protocol before 3 on RSI Video Technologies Videofied devices sends a cleartext serial number, which allows remote attackers to determine a hardcoded key by sniffing the network and performing a “jumbled up” calculation with this number.

CPENameOperatorVersion
frontel_protocolle2.0

CPE	Name	Operator	Version
	frontel_protocol	le	2.0

References

cybergibbons.com/alarms-2/multiple-serious-vulnerabilities-in-rsi-videofieds-alarm-protocol/

www.kb.cert.org/vuls/id/792004