Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2018-25130

Beward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted Database

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Beward Intercom 2.3.1 contains a credentials disclosure vulnerability that allows local attackers to access plain-text authentication credentials stored in an unencrypted database file. Attackers can read the BEWARD.INTERCOM.FDB file to extract usernames and passwords, enabling unauthorized access to IP cameras and door stations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Beward R&D Co., Ltd BEWARD Intercom

  • 2.3.1.34471affected
  • 2.3.0affected
  • 2.2.11affected
  • 2.2.10.5affected
  • 2.2.9affected
  • 2.2.8.9affected
  • 2.2.7.4affected

References