CVE-2023-2504 Hardcoded credentials in 4K QUAD
Attackers can gain root access to BirdDog video cameras using hard-coded credentials found in firmware images.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-2504?
CVE-2023-2504 is a high-severity vulnerability in BirdDog 4K QUAD, published on 22 May 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Files present on firmware images could allow an attacker to gain unauthorized access as a root user using hard-coded credentials.
Weakness: CWE-798
Which versions are affected by CVE-2023-2504?
It affects 4 products.
Products include Birddog 4k Quad Firmware, Birddog A300 Firmware, Birddog Mini Firmware, Birddog Studio R3 Firmware.
How do I fix CVE-2023-2504?
No fix has been published for CVE-2023-2504 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-2504 being exploited?
There is no known exploitation of CVE-2023-2504 in the wild and no public exploit code.
Other vulnerabilities in BirdDog 4K QUAD
Sources
Also known as GHSA-q93p-3qj2-8qc8.