Vulnerability Description
A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Guardzilla | Gz521W Firmware | All versions |
| Guardzilla | Gz521W | - |
Related Weaknesses (CWE)
References
- https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-cExploitThird Party Advisory
- https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/ExploitThird Party Advisory
- https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-cExploitThird Party Advisory
- https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/ExploitThird Party Advisory
FAQ
What is CVE-2018-5560?
CVE-2018-5560 is a vulnerability with a CVSS score of 10.0 (CRITICAL). A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of ...
How severe is CVE-2018-5560?
CVE-2018-5560 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-5560?
Check the references section above for vendor advisories and patch information. Affected products include: Guardzilla Gz521W Firmware, Guardzilla Gz521W.