CVE-2019-12920 Hardcoded credentials in n/a
Attackers can gain root access to Shenzhen Cylan Clever Dog Smart Cameras via a hardcoded Telnet password, enabling full device control.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-12920?
CVE-2019-12920 is a critical vulnerability in n/a, published on 20 Jun 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The device ships with a hardcoded 12345678 password for the root account, accessible from a TELNET login prompt.
Weakness: CWE-798
Which versions are affected by CVE-2019-12920?
It affects 2 products.
Products include Cylan Clever Dog Smart Camera Panorama Dog-2w Firmware, Cylan Clever Dog Smart Camera Plus Dog-2w-V4 Firmware.
How do I fix CVE-2019-12920?
No fix has been published for CVE-2019-12920 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-12920 being exploited?
There is no known exploitation of CVE-2019-12920 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-2jxw-qrxg-9398.