CRITICAL🇵🇱 Wersja polska

CVE-2023-30354

CVSS 9.8v3.1pub. 2023-05-10upd. 2025-01-27

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Tenda Cp3

    HW
    Tenda
    all versions

  • Tenda Cp3 Firmware

    OS
    Tenda
    11.10.00.2211041355
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-30352CRITICAL9.8PL ✓same product

Tenda CP3: Hardkodowane hasło dostępu do strumienia RTSP

CVE-2023-30353CRITICAL9.8PL ✓same product

RCE w kamerze IP Tenda CP3 poprzez dokument XML bez uwierzytelnienia

CVE-2023-23080CRITICAL9.8PL ✓same product

Command injection w urządzeniach Tenda CP/IT7 — nieautoryzowane wykonanie poleceń

CVE-2023-30351HIGH7.5same product

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default pas...

CVE-2023-30356HIGH7.5same product

Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows a...