Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP…

Description

Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.

Scores

EPSS (exploitation in 30 days)

4.6% · top 8.4% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

• n/a
• CWE-254 (opens in a new tab)Other CVEs with CWE-254

Affected products

• n/a

  • affected n/a

References (6)

• http://www.forbes.com/sites/andygreenberg/2013/01/28/more-than-a-dozen-brands-of-security-camera-systems-vulnerable-to-hacker-hijacking/ (opens in a new tab)x_refsource_MISCx_transferred
• http://console-cowboys.blogspot.com/2013/01/swann-song-dvr-insecurity.html (opens in a new tab)x_refsource_MISCx_transferred
• VU#899080 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• VU#923388 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
• https://community.rapid7.com/community/metasploit/blog/2013/01/23/ray-sharp-cctv-dvr-password-retrieval-remote-root (opens in a new tab)x_refsource_MISCx_transferred
• 20150625 CVE-2015-4464 Insufficient Authorization Checks Request Handling Remote Authentication Bypass for Kguard Digital Video Recorders (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2015-8286](https://trackcve.app/badge/CVE-2015-8286.svg)](https://trackcve.app/cve/CVE-2015-8286)

Record last updated 6 Aug 2024, 08:13 UTC.