CVE-2013-3542: Critical severity grandstream gxv3501 firmware vulnerability
Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WPHD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2013-3542?
CVE-2013-3542 is a vulnerability found in Grandstream camera models with firmware 1.0.4.11 and allows remote attackers to obtain access.
Which camera models are affected by CVE-2013-3542?
Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other models with firmware 1.0.4.11.
What is the severity of CVE-2013-3542?
CVE-2013-3542 has a severity rating of 10, which is considered critical.
How can I fix CVE-2013-3542?
To fix CVE-2013-3542, update the firmware of the affected Grandstream camera models to a version higher than 1.0.4.11.
Where can I find more information about CVE-2013-3542?
You can find more information about CVE-2013-3542 at the following sources: [1] http://seclists.org/fulldisclosure/2013/Jun/84 [2] https://www.youtube.com/watch?v=XkCBs4lenhI