CVE-2023-38024
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
The SpotCam FHD 2 device from SpotCam Co., Ltd. has a hidden Telnet function that contains a vulnerability due to hard-coded Telnet credentials. A remote unauthenticated attacker can exploit this vulnerability to gain access to the system and perform arbitrary system operations or disrupt services.
Risk Assessment
This vulnerability poses a significant risk to organizations as it allows attackers remote access to the system, potentially leading to unauthorized actions and service disruptions.
Recommendation
It is recommended to disable the Telnet function or implement stronger authentication mechanisms and regularly update the device's firmware to eliminate hard-coded credentials.
Other vulnerabilities in SpotCam FHD 2
See all- CVE-2023-38026Critical
SpotCam FHD 2 by SpotCam Co., Ltd. has a vulnerability related to the use of hard-coded uBoot credentials. A remote attacker can exploit this vulnerability to gain access to the system to perform arbitrary system operations or disrupt service.
- CVE-2023-38025Critical
The SpotCam FHD 2 device from SpotCam Co., Ltd. has a hidden Telnet function that is vulnerable to OS command injection. A remote unauthenticated attacker can exploit this vulnerability to perform command injection attacks or disrupt service.
Original NVD description (English source)
SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. An remote unauthenticated attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.