We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-38026

SpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -2



Description

SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.

Reserved 2023-07-12 | Published 2023-08-28 | Updated 2024-10-02 | Assigner twcert


CRITICAL: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-798 Use of Hard-coded Credentials

Product status

Default status
unaffected

1.0036
affected

References

www.twcert.org.tw/tw/cp-132-7333-972ca-1.html

cve.org (CVE-2023-38026)

nvd.nist.gov (CVE-2023-38026)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-38026

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.