GHSA-gv5j-2376-g8mrCriticalCVSS 9.8
Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential vulnerability that allows...
🔗 CVE IDs covered (1)
📋 Description
Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential vulnerability that allows unauthenticated attackers to access a Linux shell. Attackers can connect to port 23 using the default credential to execute arbitrary commands on the camera's operating system.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2021-47796
- https://www.exploit-db.com/exploits/50160
- https://www.vulncheck.com/advisories/denver-smart-wifi-camera-shc-telnet-remote-code-execution-rce
- http://old.denver.eu/products/smart-home-security/ip-camera-/indoor/c-1024/c-1245
- https://www.exploit-db.com/exploits/50162
- https://www.vulncheck.com/advisories/denver-sho-110-ip-camera-unauthenticated-snapshot-access
- http://old.denver.eu/products/smart-home-security/denver-sho-110/c-1024/c-1243/p-3826
- https://github.com/advisories/GHSA-gv5j-2376-g8mr