CVE-2023-38025
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
The SpotCam FHD 2 device from SpotCam Co., Ltd. has a hidden Telnet function that is vulnerable to OS command injection. A remote unauthenticated attacker can exploit this vulnerability to perform command injection attacks or disrupt service.
Risk Assessment
This vulnerability could lead to unauthorized access to the system and potential disruption of its operation, posing a serious risk to the organization's security.
Recommendation
It is recommended to disable the Telnet function and update the device's firmware to mitigate this vulnerability.
Original NVD description (English source)
SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of OS command injection. An remote unauthenticated attacker can exploit this vulnerability to execute command injection attack to arbitrary system commands or disrupt service.