CVE-2020-6852 - CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required

Back Back to CVE browser

CRITICAL

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required

Published Apr 2, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.42%

Description

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-307

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27995
Advisory
https://insights.oem.avira.com/serious-security-flaws-uncovered-in-cacagoo-ip-cameras/
x_refsource_MISCExploitThird Party Advisory
https://www.cacagoo.com
x_refsource_MISCProduct

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27995		Advisory
https://insights.oem.avira.com/serious-security-flaws-uncovered-in-cacagoo-ip-cameras/		x_refsource_MISCExploitThird Party Advisory
https://www.cacagoo.com		x_refsource_MISCProduct