CVE-2020-27558

Vulnerability

The vulnerability is the presence of an undocumented user account in the BASETech GE-131 BT-1837836 IP camera firmware version 20180921. This account can be used to access the video stream without requiring the normal device password, bypassing authentication mechanisms. The camera is configured via the V12 mobile app and uses a default password "123456", but the undocumented user provides an alternative access path.

Exploitation

An attacker with network access to the camera can exploit this vulnerability by connecting to the camera using the undocumented user credentials. The reference notes that access to the video stream is possible even from outside the local network if the camera is behind a firewall [1]. No additional authentication or user interaction is required.

Impact

Successful exploitation allows an unauthenticated remote attacker to view the live video stream, leading to unauthorized information disclosure. The attacker gains no other privileges, but the privacy of the camera's feed is compromised.

Mitigation

As of the publication date (2020-11-17), no firmware update has been released to address this issue. The camera appears to be end-of-life, with no vendor support. Users should consider replacing the device or isolating it from untrusted networks as a workaround.