VYPR

GE-131

by BASETech

CVEs (3)

  • CVE-2020-27553Nov 17, 2020
    risk 0.00cvss epss 0.00

    In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoot /etc“. This allows an attacker with network access to the web-server to download any files from the “/etc” folder without authentication. No path…

  • CVE-2020-27555Nov 17, 2020
    risk 0.00cvss epss 0.03

    Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user.

  • CVE-2020-27558Nov 17, 2020
    risk 0.00cvss epss 0.00

    Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream.