Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin:password") is used in the Android application that allows attackers to use a hidden API URL "/goform/SystemCommand" to execute any command with root permission.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PLANEX CS-QR20 安全漏洞
Vulnerability Description
PLANEX CS-QR20是日本PLANEX公司的一款具有夜视功能的网络摄像机产品。 PLANEX CS-QR20 1.30版本中存在安全漏洞,该漏洞源于该应用程序带有硬编码账户/密码(admin:password)。攻击者可利用该漏洞以root权限执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A