CVE-2024-31800

MEDIUM 6.8EPSS 0.4%

Authentication Bypass in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to gain a privileged command shell via the UART Debugging Port.

CVSS v3.1: 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.40% chance of exploitation in the next 30 days, 33th percentile
Published: 2024-08-15
Updated: 2024-10-30

Proof-of-concept exploits (1)

https://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-001

References

Related