CVE-2019-12920
Critical
Description
On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The device ships with a hardcoded 12345678 password for the root account, accessible from a TELNET login prompt.
SeverityCritical
CVSS9.8
Exploit probability—
ProductCylan Clever Dog Smart Camera Panorama Dog-2w Firmware
PublishedJun 20, 2019
First seenJun 20, 2019
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cylan clever_dog_smart_camera_panorama_dog-2w_firmware | No range specified | — |
| cylan clever_dog_smart_camera_plus_dog-2w-v4_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.