Description
INIM Electronics Smartliving SmartLAN/G/SI <=6.x contains hard-coded credentials in its Linux distribution image that cannot be changed through normal device operations. Attackers can exploit these persistent credentials to log in and gain unauthorized system access across multiple SmartLiving device models.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| INIM Electronics s.r.l. | Smartliving SmartLAN/G/SI | <=6.0, 505, 515, 1050, 1050/G3, 10100L, 10100L/G3 | — |
References
- Zero Science Lab Vulnerability Advisory third-party-advisory
- Exploit Database Entry 47763 exploit
- Packet Storm Security Exploit File exploit
- IBM X-Force Vulnerability Exchange Entry vdb-entry
- INIM Vendor Homepage product