{"id":"01M6MYE1M7BJNETCVA9B0T2V5E","product_id":"01M6MYE19YR16XYG0F23ENREDS","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"Rapid7’s 2018 record describes a shared cloud credential in Guardzilla All-In-One systems (CVE-2018-5560), creating a data-exposure risk. It is not evidence of actual data theft.","body_md":"Rapid7’s CVE-2018-5560 record describes a shared hard-coded cloud-storage credential that could expose other users’ private data in the Guardzilla All-In-One system. This is a historical vulnerability disclosure, not evidence of actual data theft.","method":null,"source_method":null,"sources":[{"title":"CVE-2018-5560 (Rapid7 CNA record)","url":"https://www.cve.org/CVERecord?id=CVE-2018-5560","publisher":"CVE Program / Rapid7","publishedAt":null}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Removed unsupported exact GZ501W mapping, duplicate finding and implication of observed exfiltration. This is not independent device verification.","created_at":1793851852423,"updated_at":1793917832000,"slug":"guardzilla-gz501w","vendor":"Guardzilla","model":"All-In-One Video Security System (2018 disclosure)","category":"ip_camera","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYE1M7BJNETCVA9B0T2V5E","product_url":"https://isitspying.com/p/guardzilla-gz501w","findings":[{"id":"accuracy:01M6MYE1M7BJNETCVA9B0T2V5E:0","report_id":"01M6MYE1M7BJNETCVA9B0T2V5E","kind":"known_cve","severity":"critical","detail":"CVE-2018-5560: shared hard-coded cloud credential; Rapid7 CNA CVSSv3 10.0.","ai_model":null}],"contacted_hosts":[],"evidence":[]}