CVE-2023-38026

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 28, 2023
Updated: Aug 29, 2023
CWE ID 798

Summary

CVE-2023-38026 is a vulnerability affecting SpotCam FHD 2 devices from SpotCam Co., Ltd. The issue involves hard-coded uBoot credentials, which can be exploited by remote attackers to gain unauthorized access to the system. This vulnerability allows attackers to carry out arbitrary system operations or disrupt services, posing a significant security risk. The hard-coded credentials make it easier for attackers to bypass authentication, enabling them to access sensitive information and potentially cause damage to the system. Users of SpotCam FHD 2 devices are advised to apply the necessary patches or updates as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share