Description (CNA)
INIM Electronics Smartliving SmartLAN/G/SI <=6.x contains hard-coded credentials in its Linux distribution image that cannot be changed through normal device operations. Attackers can exploit these persistent credentials to log in and gain unauthorized system access across multiple SmartLiving device models.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| INIM Electronics s.r.l. / Smartliving SmartLAN/G/SI | affected <=6.0; affected 505; affected 515; affected 1050; affected 1050/G3; affected 10100L; affected 10100L/G3 |
CWE
CWE-798
References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5546.php
- https://www.exploit-db.com/exploits/47763
- https://packetstormsecurity.com/files/155618
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172838
- https://www.inim.biz/
ADP enrichment
No English description supplied.
No references supplied.