Hardcoded credentials

2023-05-1016:15:00

PRIOn knowledge base

www.prio-n.com

ip camera

hardcoded credentials

vulnerability

physical access

u-boot

uart

wi-fi password

boot password

console access

nvd

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.4%

JSON

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.

CPENameOperatorVersion
cp3_firmwareeq11.10.00.2211041355 

CPE	Name	Operator	Version
	cp3_firmware	eq	11.10.00.2211041355

References

github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_NCD.md

github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_PBA.md