Описание
A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:guardzilla:gz521w_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:guardzilla:gz521w:-:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00472
Низкий
10 Critical
CVSS3
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-798
CWE-798
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device.
EPSS
Процентиль: 64%
0.00472
Низкий
10 Critical
CVSS3
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-798
CWE-798