CVE-2018-5560: Guardzilla All-In-One Video Security System Hard-Coded Credential

Published Jan 31, 2019
·
Updated

A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device.

Affected Software

2 affected components
Guardzilla Gz521w Firmware
Guardzilla Gz521w

Remediation

Information

There is no vendor-provided fix available, see work_around.

Event History

Jan 31, 2019
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
RemedyDescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2018-5560?

CVE-2018-5560 is rated as a high severity vulnerability due to the potential for unauthorized access to user data.

2

How do I fix CVE-2018-5560?

To fix CVE-2018-5560, update the Guardzilla GZ521W firmware to the latest version that resolves the hard-coded credential issue.

3

What does CVE-2018-5560 affect?

CVE-2018-5560 affects the Guardzilla GZ521W All-In-One Video Security System firmware.

4

What are the risks associated with CVE-2018-5560?

The risks associated with CVE-2018-5560 include unauthorized access to private user data and potential exploitation by attackers.

5

Who is impacted by CVE-2018-5560?

All users of the Guardzilla GZ521W video security system are impacted by CVE-2018-5560 due to the shared static credentials.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203