Critical severity9.8NVD Advisory· Published Apr 2, 2020· Updated Jun 17, 2026

CVE-2020-6852

Description

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required.

Affected products

CACAGOO/Cloud Storage Intelligent Camera TV-288ZD-2MPdescription
CACAGOO/Cloud Storage Intelligent Camera TV-288ZD-2MPllm-fuzzy
Range: 3.4.2.0919

Patches

Vulnerability mechanics

References

insights.oem.avira.com/serious-security-flaws-uncovered-in-cacagoo-ip-cameras/nvdExploitThird Party Advisory
www.cacagoo.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000