CVE-2018-5560

Guardzilla All-In-One Video Security System Hard-Coded Credential

State: Published
Severity: 10.0 Critical
Published: Jan 31, 2019
Updated: Sep 16, 2024
Reserved: Jan 12, 2018

Description

A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device.

Scores

CVSS	Score	Vector	Source
3.0	10.0 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N	rapid7

Weaknesses

CWE-798

Affected Products

Product	Versions
Guardzilla All-In-One Video Security SystemPractecol, LLC	2018Affected

References

https://www.0dayallday.org/guardzilla-video-camera-hard-coded-aws-credentials/
https://blog.rapid7.com/2018/12/27/r7-2018-52-guardzilla-iot-video-camera-hard-coded-credential-cve-2018-5560/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.