CVE-2023-30354
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.
MISC: https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_NCD.md
MISC: https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_PBA.md
CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30354
published: 10. 5. 2023