FNKvision Y215 CCTV Camera Weak Cryptography Vulnerability

A vulnerability exists in the FNKvision Y215 CCTV camera running version 10.194.120.40, where the firmware uses DES-based crypt() hashes to store passwords in the /etc/passwd file. This weak hashing method can be easily cracked, posing a security risk.

Impact

Exploitation of this vulnerability allows for unauthorized access to the camera with root privileges, as the weakly hashed password can be quickly cracked and used to gain access.

Reproduction

The vulnerability can be reproduced by accessing the camera's firmware, which contains hardcoded root credentials. These credentials can be extracted and verified through the camera's UART connection. Once the credentials are obtained, they can be used to log into the camera as root.