HIGH🇵🇱 Wersja polska

CVE-2023-30351

CVSS 7.5v3.1pub. 2023-05-10upd. 2025-01-27

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored using weak encryption. This vulnerability allows attackers to connect to the TELNET service (or UART) by using the exposed credentials.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Tenda Cp3

    HW
    Tenda
    all versions

  • Tenda Cp3 Firmware

    OS
    Tenda
    11.10.00.2211041355
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-30352CRITICAL9.8PL ✓same product

Tenda CP3: Hardkodowane hasło dostępu do strumienia RTSP

CVE-2023-30353CRITICAL9.8PL ✓same product

RCE w kamerze IP Tenda CP3 poprzez dokument XML bez uwierzytelnienia

CVE-2023-30354CRITICAL9.8PL ✓same product

Tenda IP Camera CP3 — ujawnienie hasła Wi-Fi i hardcoded hasło bootloadera przez UART

CVE-2023-23080CRITICAL9.8PL ✓same product

Command injection w urządzeniach Tenda CP/IT7 — nieautoryzowane wykonanie poleceń

CVE-2023-30356HIGH7.5same product

Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows a...