Vulnerability Intelligence Report
CVE-2013-3542
Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.
No Active Exploit Signals
CVSS Base Score
10.0
CRITICAL
EPSS Probability:2.60%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| grandstream | gxv3501_firmware | 1.0.4.11 |
| grandstream | gxv3501 | all |
| grandstream | gxv3504_firmware | 1.0.4.11 |
| grandstream | gxv3504 | all |
| grandstream | gxv3601_firmware | 1.0.4.11 |
| grandstream | gxv3601 | all |
| grandstream | gxv3601hd_firmware | 1.0.4.11 |
| grandstream | gxv3601hd | all |
| grandstream | gxv3601ll_firmware | 1.0.4.11 |
| grandstream | gxv3601ll | all |
| grandstream | gxv3611hd_firmware | 1.0.4.11 |
| grandstream | gxv3611hd | all |
| grandstream | gxv3611ll_firmware | 1.0.4.11 |
| grandstream | gxv3611ll | all |
| grandstream | gxv3615w_firmware | 1.0.4.11 |
| grandstream | gxv3615w | all |
| grandstream | gxv3615p_firmware | 1.0.4.11 |
| grandstream | gxv3615p | all |
| grandstream | gxv3651fhd_firmware | 1.0.4.11 |
| grandstream | gxv3651fhd | all |
| grandstream | gxv3662hd_firmware | 1.0.4.11 |
| grandstream | gxv3662hd | all |
| grandstream | gxv3615wp_hd_firmware | 1.0.4.11 |
| grandstream | gxv3615wp_hd | all |
| grandstream | gxv3500_firmware | 1.0.4.11 |
| grandstream | gxv3500 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.602%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2013-05-14T00:00:00 |
| Published | 2019-12-11T18:07:23 |
| Patch Date | 2013-06-12 |
| Last Updated | 2024-08-06T16:14:56 |
Community Chatter & Buzz