CVE-2017-17107

Critical

Published: 19/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Zivif PR115-204-P-RS web cameras version V2.3.4.2103 contain a hard-coded password 'cat1029' for the root user. The SONIX operating system setup makes this password unchangeable, allowing access to the device via a TELNET session.

Risk Assessment

The use of a hard-coded password poses a serious risk of unauthorized access to the device, potentially leading to full control over the camera.

Recommendation

It is recommended that users refrain from using these cameras or block TELNET access to minimize risk.

Original NVD description (English source)

Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session.