PT-2026-3168

CVE-2021-47796

Published

2026-01-15

Updated

2026-10-12

Description by

CVSS 4.0

8.7

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Denver SHC-150 Smart Wifi Camera (affected versions not specified)

Description The Denver SHC-150 Smart Wifi Camera contains a hardcoded telnet credential issue that allows unauthenticated attackers to access a Linux shell. Attackers can connect to port 23 using the default credential to execute arbitrary commands on the camera's operating system. The affected device allows full shell access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Ivan Nikolskiy

Ivan Nikolsky

Vendors

Affected products

Weakness enumeration

CWE-798: Use of Hard-coded Credentials

CWE-1242: Inclusion of Undocumented Features or Chicken Bits