header-logo
Suggest Exploit
vendor:
CMNC-200 IP Camera
by:
No Author
7,5
CVSS
HIGH
Undocumented Default Accounts
200
CWE
Product Name: CMNC-200 IP Camera
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: CVE-2010-4233
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2010

Finding 4: Undocumented Default Accounts

The CMNC-200 IP Camera has undocumented default accounts on its Linux operating system. These accounts can be used to login via the cameras telnet interface, which cannot be normally disabled. The usernames and passwords are listed below.

Mitigation:

Network access to these devices should be limited to authorized personnel through the use of Access Control Lists and proper network segmentation.
Source

Exploit-DB raw data:

Finding 4: Undocumented Default Accounts
CVE: CVE-2010-4233

The CMNC-200 IP Camera has undocumented default
accounts on its Linux operating system. These accounts can
be used to login via the cameras telnet interface, which
cannot be normally disabled. The usernames and passwords are
listed below.

User: root     Password: m
User: mg3500   Password: merlin

Vendor Response:
No response received.

Remediation Steps:
No patch currently exists for this issue. To limit exposure,
network access to these devices should be limited to authorized
personnel through the use of Access Control Lists and proper
network segmentation.

Navigation

Suggest Exploit

Services By CQR