CVE-2018-5560CWE-798

Guardzilla All-In-One Video Security System Hard-Coded Credential

Critical · published January 31, 2019

CVSS v3.0
10.0
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

🚨 A hard-coded password is leaving the front door wide open! This critical vulnerability in Practecol's Guardzilla security system lets attackers view all users' private data. 🔥 Think of it like a hotel that uses the same key for every room—anyone with that key can waltz in and snoop through everyone’s belongings! An attacker could easily access sensitive information of every user, compromising personal privacy on a massive scale. It's like handing out your diary to anyone who asks, absolutely devastating for users' trust and security!

Put simply

Think of it like a hotel that uses the same key for every room—anyone with that key can waltz in and snoop through everyone’s belongings! This vulnerability stems from a reliance on static, hard-coded credentials in the cloud-based storage system of Guardzilla's design, allowing unauthorized access to user data.

What to do

An attacker could easily access sensitive information of every user, compromising personal privacy on a massive scale. It's like handing out your diary to anyone who asks, absolutely devastating for users' trust and security! Immediately update to the latest version that addresses this vulnerability, ensuring that all hard-coded credentials are removed. Implement secure credential management practices to avoid similar risks in the future. You've got this! Follow these steps, and you'll be protecting user data like a pro! 🛡️

The record
Technical detail
CVSS v3.0
10.0 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01620 · 75.7th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2019-01-31T21:00Z
EPSS history
Timeline
  • 31 JAN 21:00Z
    Guardzilla All-In-One Video Security System Hard-Coded Credential
    cvelistv5