CVEvulnerability

CVE-2013-3542

10.0 CRITICAL Published 2019-12-11 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2019-12-11
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-798

Description

Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.

Affected configurations

• grandstream gxv3501 firmware 1.0.4.11 • grandstream gxv3504 firmware 1.0.4.11 • grandstream gxv3601 firmware 1.0.4.11 • grandstream gxv3601hd firmware 1.0.4.11 • grandstream gxv3601ll firmware 1.0.4.11 • grandstream gxv3611hd firmware 1.0.4.11 • grandstream gxv3611ll firmware 1.0.4.11 • grandstream gxv3615w firmware 1.0.4.11 • grandstream gxv3615p firmware 1.0.4.11 • grandstream gxv3651fhd firmware 1.0.4.11 • grandstream gxv3662hd firmware 1.0.4.11 • grandstream gxv3615wp hd firmware 1.0.4.11 • grandstream gxv3500 firmware 1.0.4.11

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References