CVE-2023-38024
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
The SpotCam FHD 2 device from SpotCam Co., Ltd. has a hidden Telnet function that contains a vulnerability due to hard-coded Telnet credentials. A remote unauthenticated attacker can exploit this vulnerability to gain access to the system and perform arbitrary system operations or disrupt services.
Risk Assessment
This vulnerability poses a significant risk to organizations as it allows attackers remote access to the system, potentially leading to unauthorized actions and service disruptions.
Recommendation
It is recommended to disable the Telnet function or implement stronger authentication mechanisms and regularly update the device's firmware to eliminate hard-coded credentials.
Original NVD description (English source)
SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. An remote unauthenticated attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.