CVE-2023-30353: Improper Neutralization of Special Elements used in a Command

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document...

CVE-2023-30354: Cleartext Transmission of Sensitive Information

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access...

CVE-2023-30352

CVE-2023-30352 affects Shenzen Tenda Technology IP Camera CP3 (firmware v11.10.00.2211041355). Root cause: hard-coded default password for the RTSP feed, enabling potential unauthorized access. Impact per CVSS: high confidentiality, integrity, and availability (score 9.8). Mitigations from connec...

Tenda CP3 安全漏洞

Tenda CP3 is a smart camera from Tenda, China. A security vulnerability exists in Tenda CP3 version V11.10.00.2211041355, which stems from the device not disabling physical access to the U-Boot via UART, resulting in the display of a Wi-Fi password, which can be exploited by an attacker to insert...

CVE-2023-30354

The CVE-2023-30354 entry concerns Shenzen Tenda CP3 IP Camera (v11.10.00.2211041355). The issue arises from allowing physical access to U-Boot via UART, which exposes the Wi‑Fi password and enables a hardcoded boot password to be entered for console access. Affected component: U-Boot console on C...

CVE-2023-30351: Inadequate Encryption Strength

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored using weak encryption. This vulnerability allows attackers to connect to the TELNET service or UART by using the exposed credentials...

CVE-2023-23080

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10=V202209060242025 and Tenda IT7-PCS Tenda IT7-PCS=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS=V2209020908...

CVE-2023-23080

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10=V202209060242025 and Tenda IT7-PCS Tenda IT7-PCS=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS=V2209020908...

Command injection

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10=V202209060242025 and Tenda IT7-PCS Tenda IT7-PCS=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS=V2209020908...

CVE-2023-23080

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10=V202209060242025 and Tenda IT7-PCS Tenda IT7-PCS=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS=V2209020908...

CVE-2023-23080: Improper Neutralization of Special Elements used in a Command

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7=V11.10.00.2211041403 and Tenda CP3 v.10 Tenda CP3 v.10=V202209060242025 and Tenda IT7-PCS Tenda IT7-PCS=V2209020914 and Tenda IT7-LCS Tenda IT7-LCS=V2209020914 and Tenda IT7-PRS Tenda IT7-PRS=V2209020908...

CP3 Studio PC Version - Denial of Service

No description provided by source. Exploit Title : CP3 Studio PC Ver. Dos Date : June 12, 2010 Author : chap0 - www.seek-truth.net Link : http://www.vocooo.com Version : 2.0 Tested on : Windows XP SP3 En Greetz to : Corelan Security Team The Crew :...

CP3 Studio PC 2.0 Denial Of Service

Exploit Title : CP3 Studio PC Ver. Dos Date : June 12, 2010 Author : chap0 - www.seek-truth.net Link : http://www.vocooo.com Version : 2.0 Tested on : Windows XP SP3 En Greetz to : Corelan Security Team The Crew : http://www.corelan.be:8800/index.php/security/corelan-team-members/ Advisory :...

CP3 Studio PC Ver. Denial of Service

Exploit for windows platform in category dos / poc ==================================== CP3 Studio PC Ver. Denial of Service ==================================== Exploit Title : CP3 Studio PC Ver. Dos Date : June 12, 2010 Author : chap0 - www.seek-truth.net Link : http://www.vocooo.com Version :...

CP3 Studio PC Version - Denial of Service

Exploit Title : CP3 Studio PC Ver. Dos Date : June 12, 2010 Author : chap0 - www.seek-truth.net Link : http://www.vocooo.com Version : 2.0 Tested on : Windows XP SP3 En Greetz to : Corelan Security Team The Crew : http://www.corelan.be:8800/index.php/security/corelan-team-members/ Advisory :...