Trusted Design

Swann SRNVW-470 unauthorized video streaming/hard-coded password

概要

According to the researcher, the Swann SRNVW-470LCD and Swann SWNVW-470CAM contain a hard-coded passwords allowing administrative or root access. Other models may also be affected. Current evidence suggests that the source of the hard-coded passwords in these models is CVE-2015-8286. The CERT/CC has published VU#899080 regarding CVE-2015-8286. However, the CERT/CC has not been able to confirm this with Swann. CWE-288: Authentication Bypass Using an Alternate Path or Channel - CVE-2015-8287 According to the researcher, a remote attacker with knowledge of the correct URL may be able to stream the live video feed from an IP camera connected to the NVR. This URL does not authenticate users before displaying the video feed

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• DVR Firmware for multiple vendors contains hard-coded creds (score: 0.63)
• Cisco default credentials - again! (score: 0.51)
• DSL routers contain hard-coded "XXXXairocon" credentials (score: 0.50)
• AirLink101 SkyIPCam1620W OS Command Injection (score: 0.50)
• CVE-2015-0359 in Angler EK (score: 0.47)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る