CVE-2024-31798

MEDIUM 6.8EPSS 0.4%

Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retrieve the root password for all similar devices

CVSS v3.1: 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 6.4 MEDIUMCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.36% chance of exploitation in the next 30 days, 29th percentile
Published: 2024-08-15

Proof-of-concept exploits (1)

https://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-001

References

Related