Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-38024 EUVD-2023-41851GHSA-393r-2hjv-4h5f

SpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -1

Published Aug 28, 2023 · Updated Oct 2, 2024 · Assigned by twcert

Description

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. An remote unauthenticated attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.

Affected products

VendorProductAffectedFixed
SPOTCAM SpotCam FHD 2 1.0036 —

References