CVE-2024-13893 Shared credentials in Smartwares cameras
Attackers with physical access can extract shared telnet credentials from SPI memory, enabling unauthorized remote access to Smartwares cameras.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-13893?
CVE-2024-13893 is a high-severity vulnerability in Smartwares C724IP, published on 6 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, might share same credentials for telnet service. Hash of the password can be retrieved through physical access to SPI connected memory. For the telnet service to be enabled, the inserted SD card needs to have a folder with a specific name created. Two products were tested, but since the vendor has not replied to reports, patching status remains unknown, as well as groups of devices and firmware ranges in which the same password is shared. Newer firmware versions might be vulnerable as well.
Weakness: CWE-1392
Which versions are affected by CVE-2024-13893?
How do I fix CVE-2024-13893?
No fix has been published for CVE-2024-13893 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-13893 being exploited?
There is no known exploitation of CVE-2024-13893 in the wild and no public exploit code.
Sources
Also known as GHSA-xm5p-cw89-f4rg.