Vulnerability Description
Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retrieve the root password for all similar devices
CVSS Score
6.8
MEDIUM
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gncchome | Gncc C2 Firmware | - |
| Gncchome | Gncc C2 | - |
Related Weaknesses (CWE)
References
- https://gncchome.com/collections/indoor-camera/products/c2-indoor-security-camerProduct
- https://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-001ExploitThird Party Advisory
FAQ
What is CVE-2024-31798?
CVE-2024-31798 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retrieve the root password for all similar devices
How severe is CVE-2024-31798?
CVE-2024-31798 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-31798?
Check the references section above for vendor advisories and patch information. Affected products include: Gncchome Gncc C2 Firmware, Gncchome Gncc C2.