CVE-2020-6852

Critical

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root…

mitre·CWE-307·Published 2020-04-02

CVSS

9.8

EPSS

0.02

KEV

Exploits

cve.orgen

178 chars

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required.

NVDen

178 chars

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required.

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP con versiones de firmware 3.4.2.0919, presenta una autenticación débil del acceso a TELNET, conllevando a privilegios root sin una contraseña requerida.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	10.0	10.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H