Vulnerability · Published Jul 9, 2024 · Assigned by CERT-PL
CVE-2024-5634
High 8.6
In plain English
A high-severity security flaw in LBH30FE200W from Longse Technology. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 4.0)8.6High
Exploit odds (30 days)0.2%top 90.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Longse model LBH30FE200W cameras, as well as products based on this device, make use of telnet passwords which follow a specific pattern. Once the pattern is known, brute-forcing the password becomes relatively easy. Additionally, every camera with the same firmware version shares the same password.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Longse Technology | LBH30FE200W | 0 – through * |
| Zamel | ZMB-01/C | 0 – through * |
Weakness: CWE-1391 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://zamel.com/pl/gardi/zestaw-monitoringu-bezprzewodowego-wi-fi-typ-zmb-01 product
- https://cert.pl/en/posts/2024/07/CVE-2024-5631/ third-party-advisory
- https://cert.pl/posts/2024/07/CVE-2024-5631/ third-party-advisory