CVE-2013-3542
Summary
| CVE | CVE-2013-3542 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-12-11 19:15:00 UTC |
| Updated | 2019-12-19 20:21:00 UTC |
| Description | Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session. |
Risk And Classification
Problem Types: CWE-798
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Grandstream | Gxv3500 | - | All | All | All |
| Hardware | Grandstream | Gxv3500 | - | All | All | All |
| Operating System | Grandstream | Gxv3500 Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3500 Firmware | 1.0.4.11 | All | All | All |
| Hardware | Grandstream | Gxv3501 | - | All | All | All |
| Hardware | Grandstream | Gxv3501 | - | All | All | All |
| Operating System | Grandstream | Gxv3501 Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3501 Firmware | 1.0.4.11 | All | All | All |
| Hardware | Grandstream | Gxv3504 | - | All | All | All |
| Hardware | Grandstream | Gxv3504 | - | All | All | All |
| Operating System | Grandstream | Gxv3504 Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3504 Firmware | 1.0.4.11 | All | All | All |
| Hardware | Grandstream | Gxv3601 | - | All | All | All |
| Hardware | Grandstream | Gxv3601 | - | All | All | All |
| Hardware | Grandstream | Gxv3601hd | - | All | All | All |
| Hardware | Grandstream | Gxv3601hd | - | All | All | All |
| Operating System | Grandstream | Gxv3601hd Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3601hd Firmware | 1.0.4.11 | All | All | All |
| Hardware | Grandstream | Gxv3601ll | - | All | All | All |
| Hardware | Grandstream | Gxv3601ll | - | All | All | All |
| Operating System | Grandstream | Gxv3601ll Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3601ll Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3601 Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3601 Firmware | 1.0.4.11 | All | All | All |
| Hardware | Grandstream | Gxv3611hd | - | All | All | All |
| Hardware | Grandstream | Gxv3611hd | - | All | All | All |
| Operating System | Grandstream | Gxv3611hd Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3611hd Firmware | 1.0.4.11 | All | All | All |
| Hardware | Grandstream | Gxv3611ll | - | All | All | All |
| Hardware | Grandstream | Gxv3611ll | - | All | All | All |
| Operating System | Grandstream | Gxv3611ll Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3611ll Firmware | 1.0.4.11 | All | All | All |
| Hardware | Grandstream | Gxv3615p | - | All | All | All |
| Hardware | Grandstream | Gxv3615p | - | All | All | All |
| Operating System | Grandstream | Gxv3615p Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3615p Firmware | 1.0.4.11 | All | All | All |
| Hardware | Grandstream | Gxv3615w | - | All | All | All |
| Hardware | Grandstream | Gxv3615w | - | All | All | All |
| Hardware | Grandstream | Gxv3615wp Hd | - | All | All | All |
| Hardware | Grandstream | Gxv3615wp Hd | - | All | All | All |
| Operating System | Grandstream | Gxv3615wp Hd Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3615wp Hd Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3615w Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3615w Firmware | 1.0.4.11 | All | All | All |
| Hardware | Grandstream | Gxv3651fhd | - | All | All | All |
| Hardware | Grandstream | Gxv3651fhd | - | All | All | All |
| Operating System | Grandstream | Gxv3651fhd Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3651fhd Firmware | 1.0.4.11 | All | All | All |
| Hardware | Grandstream | Gxv3662hd | - | All | All | All |
| Hardware | Grandstream | Gxv3662hd | - | All | All | All |
| Operating System | Grandstream | Gxv3662hd Firmware | 1.0.4.11 | All | All | All |
| Operating System | Grandstream | Gxv3662hd Firmware | 1.0.4.11 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| BackdoorTelnetvid - YouTube | MISC | www.youtube.com | Exploit, Third Party Advisory |
| Full Disclosure: Security Analysis of IP video surveillance cameras | MISC | seclists.org | Mailing List, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.