VulnerabilityAnalyzed

CVE-2024-31798

Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retrieve the root password for all similar devices

MEDIUM 6.8EPSS 0.36%

Does this matter?

Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.

Description

Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retrieve the root password for all similar devices

CVSS 3.1: 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.36% probability · 30th percentile
CISA KEV: Not listed
Weakness: CWE-798, CWE-259
Affected: gncchome/gncc c2 firmware
Source: cve@mitre.org

References

https://gncchome.com/collections/indoor-camera/products/c2-indoor-security-camera-1080pProduct
https://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-001Exploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.