Finding 4: Undocumented Default Accounts CVE: CVE-2010-4233 The CMNC-200 IP Camera has undocumented default accounts on its Linux operating system. These accounts can be used to login via the cameras telnet interface, which cannot be normally disabled. The usernames and passwords are listed below. User: root Password: m User: mg3500 Password: merlin Vendor Response: No response received. Remediation Steps: No patch currently exists for this issue. To limit exposure, network access to these devices should be limited to authorized personnel through the use of Access Control Lists and proper network segmentation.
Related ExploitsTrying to match CVEs (1): CVE-2010-4233
Trying to match OSVDBs (1): 69333
Other Possible E-DB Search Terms: Camtron CMNC-200 IP Camera, Camtron CMNC
|2010-11-13||Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow||Trustwave's...|
|2010-11-13||Camtron CMNC-200 IP Camera - Authentication Bypass||Trustwave's...|
|2010-11-13||Camtron CMNC-200 IP Camera - Denial of Service||Trustwave's...|
|2010-11-13||Camtron CMNC-200 IP Camera - Directory Traversal||Trustwave's...|