CVE-2021-45039

Summary

CVE-2021-45039 is a vulnerability affecting multiple Uniview IP Camera models, including IPC_G6103, IPC_G61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPC_HCMN. An unauthenticated attacker can exploit an undocumented UDP service on port 7788, causing a buffer overflow that leads to code execution. Successful exploitation enables the attacker to start the telnetd service, which comes with a hardcoded default username (root) and password (123456). Despite having a restrictive shell, this can be bypassed through the built-in ECHO shell command, potentially granting the attacker full control of the affected device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.