CRITICAL🇬🇧 English

CVE-2023-30354

CVSS 9.8v3.1pub. 2023-05-10upd. 2025-01-27

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Tenda Cp3

    HW
    Tenda
    wszystkie wersje

  • Tenda Cp3 Firmware

    OS
    Tenda
    11.10.00.2211041355
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-30352CRITICAL9.8ten sam produkt

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default pas...

CVE-2023-30353CRITICAL9.8ten sam produkt

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via a...

CVE-2023-23080CRITICAL9.8ten sam produkt

Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.221104...

CVE-2023-30351HIGH7.5ten sam produkt

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default pas...

CVE-2023-30356HIGH7.5ten sam produkt

Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows a...