Smartwares Cameras Telnet Credential Vulnerability

A vulnerability exists in Smartwares cameras CIP-37210AT and C724IP, as well as other models with the same firmware in versions prior to 3.3.0, allowing devices to share identical credentials for the telnet service. The password hash can be extracted through physical access to the SPI-connected memory. For the telnet service to be activated, the inserted SD card must contain a folder with a specific name. While two products were tested, the vendor has not responded to reports, leaving the patching status unknown and creating uncertainty about other affected devices and firmware ranges. Newer firmware versions may also be vulnerable.

Impact

Exploitation of this vulnerability allows for unauthorized access to the telnet service, potentially leading to further exploitation of the device.