CVE-2015-8286 Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.
CriticalCVSS 9.8
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zhuhai raysharp firmware | All versions | No fix listed |
References
- console-cowboys.blogspot.com exploit
- 20150625 CVE-2015-4464 Insufficient Authorization Checks Request Handling Remote Authentication Bypass for Kguard Digital Video Recorders exploit mailing-list
- www.forbes.com
- VU#899080 third-party-advisory us-government-resource
- VU#923388 third-party-advisory us-government-resource
- community.rapid7.com