Vulnerability Description
Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted database file. Attackers can read the BEWARD.INTERCOM.FDB file to extract usernames and passwords, enabling unauthorized access to IP cameras and door stations.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://www.beward.net
- https://www.exploit-db.com/exploits/46267
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5505.php
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5505.php
FAQ
What is CVE-2018-25130?
CVE-2018-25130 is a vulnerability with a CVSS score of 6.2 (MEDIUM). Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted database file. Attackers can ...
How severe is CVE-2018-25130?
CVE-2018-25130 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-25130?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.