critical9.8
CVE-2019-12920
On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access.
Impact
On Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the network can login remotely to the camera and gain root access. The device ships with a hardcoded 12345678 password for the root account, accessible from a TELNET login prompt.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cylan | Clever Dog Smart Camera Panorama Dog-2w Firmware | All versions |
| Cylan | Clever Dog Smart Camera Plus Dog-2w-V4 Firmware | All versions |