CVE-2024-5632
Medium
Description
Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device, create a WiFi network with a default password. A user is neither advised to change it during the installation process, nor such a need is described in the manual. As the cameras from the same kit connect automatically, it is very probable for the default password to be left unchanged.
SeverityMedium
CVSS5.3
Exploit probability—
ProductNVR3608PGE2W
PublishedJul 9, 2024
First seenJul 9, 2024
Weakness typeCWE-1392CWE-1392
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Longse Technology NVR3608PGE2W | 0 | — |
| Zamel ZMB-01 | 0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.