CVE-2020-25749
Critical
Description
The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. The Telnet service cannot be disabled and this password cannot be changed via standard functionality.
SeverityCritical
CVSS9.8
Exploit probability—
ProductRubetek Rv-3406 Firmware
PublishedSep 25, 2020
First seenSep 25, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubetek rv-3406_firmware | 339, 342 | — |
| rubetek rv-3409_firmware | 339, 342 | — |
| rubetek rv-3411_firmware | 339, 342 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.