Vulnerabilities > Basetech

DATE CVE VULNERABILITY TITLE RISK
2020-11-17 CVE-2020-27558 Improper Authentication vulnerability in Basetech Ge-131 Bt-1837836 Firmware 20180921
Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream.
network
low complexity
basetech CWE-287
4.0
2020-11-17 CVE-2020-27557 Cleartext Storage of Sensitive Information vulnerability in Basetech Ge-131 Bt-1837836 Firmware 20180921
Unprotected Storage of Credentials vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 allows local users to gain access to the video streaming username and password via SQLite files containing plain text credentials.
local
low complexity
basetech CWE-312
2.1
2020-11-17 CVE-2020-27556 Unspecified vulnerability in Basetech Ge-131 Bt-1837836 Firmware 20180921
A predictable device ID in BASETech GE-131 BT-1837836 firmware 20180921 allows unauthenticated remote attackers to connect to the device.
network
low complexity
basetech
5.0
2020-11-17 CVE-2020-27555 Insufficiently Protected Credentials vulnerability in Basetech Ge-131 Bt-1837836 Firmware 20180921
Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user.
network
low complexity
basetech CWE-522
critical
10.0
2020-11-17 CVE-2020-27554 Cleartext Transmission of Sensitive Information vulnerability in Basetech Ge-131 Bt-1837836 Firmware 20180921
Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensitive information transmitted between the mobile app and the camera device.
network
low complexity
basetech CWE-319
5.0
2020-11-17 CVE-2020-27553 Path Traversal vulnerability in Basetech Ge-131 Bt-1837836 Firmware 20180921
In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoot /etc“.
network
low complexity
basetech CWE-22
5.0