{"id":"01M6MYE19YR16XYG0F23ENREDS","slug":"guardzilla-gz501w","vendor":"Guardzilla","oem":null,"model":"GZ501W","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"Indoor security camera whose firmware embedded a shared, hard-coded Amazon S3 credential giving access to all users' stored video (CVE-2018-5560).","status":"confirmed","status_reason":"CVE-2018-5560 (Rapid7 / 0DayAllDay disclosure, Dec 2018)","status_at":1793853870909,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851852094,"updated_at":1793853870909,"url":"https://isitspying.com/p/guardzilla-gz501w","badge":"https://isitspying.com/badge/guardzilla-gz501w.svg","identifiers":[{"kind":"cve","value":"CVE-2018-5560","product_id":"01M6MYE19YR16XYG0F23ENREDS","confidence":1,"source":"seed","created_at":1793851852209},{"kind":"model_number","value":"GZ501W","product_id":"01M6MYE19YR16XYG0F23ENREDS","confidence":1,"source":"seed","created_at":1793851852259}],"findings":[{"kind":"hardcoded_credentials","severity":"critical","n":1,"verified_n":1},{"kind":"known_cve","severity":"critical","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYE1M7BJNETCVA9B0T2V5E","url":"https://isitspying.com/r/01M6MYE1M7BJNETCVA9B0T2V5E","status":"verified","verdict":"vulnerable","summary":"Hard-coded S3 credentials in firmware expose every customer's cloud-stored video (CVE-2018-5560)","method":"firmware_dump","channel":"api","handle":"isitspying","created_at":1793851852423}],"responses":[],"sources":[{"id":"01M6MYE1HRT9S42H69Y51FR6GT","product_id":"01M6MYE19YR16XYG0F23ENREDS","report_id":null,"title":"CVE-2018-5560","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5560","publisher":"NVD","published_at":"2018-12-27","created_at":1793851852344}]}