CVE Catalog
CVE-2016-6535
CriticalSummary
AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, allowing remote attackers to gain root access by leveraging knowledge of the credentials and establishing a TELNET session.
Risk Assessment
Remote attackers can gain full access to the system, posing a serious threat to data security and device integrity.
Recommendation
It is recommended to change the default credentials and disable the TELNET protocol on these devices to minimize the risk of unauthorized access.
Original NVD description (English source)
AVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which allows remote attackers to obtain root access by leveraging knowledge of the credentials and establishing a TELNET session.