Denver SHC-150 Smart Wifi Camera Hardcoded Telnet Credential Vulnerability Allowing Remote Code Execution

A vulnerability exists in the Denver SHC-150 Smart Wifi Camera due to hardcoded telnet credentials. This flaw allows unauthenticated attackers to access a Linux shell on the camera's operating system. The vulnerability is present in all firmware versions of the SHC-150 model. Exploitation involves connecting to the camera's telnet service on port 23 with the default credential, 'default', to execute arbitrary commands.

Impact

Exploitation of this vulnerability leads to unauthorized access to the camera's operating system, allowing for arbitrary command execution.

Reproduction

To reproduce this vulnerability, connect to the camera's telnet service on port 23 using the default credential 'default'. Once connected, a Linux shell is accessible, from which commands can be executed on the camera's operating system.