CVE-2013-3542: Grandstream GXV3500 Firmware

Critical severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded account "!#/" with the same password, which makes it easier for remote attackers to obtain access via a TELNET session.

Affected products

• Grandstream GXV3500 Firmware: version 1.0.4.11 only
• Grandstream GXV3501 Firmware: version 1.0.4.11 only
• Grandstream GXV3504 Firmware: version 1.0.4.11 only
• Grandstream GXV3601 Firmware: version 1.0.4.11 only
• Grandstream GXV3601HD Firmware: version 1.0.4.11 only
• Grandstream GXV3601LL Firmware: version 1.0.4.11 only
• Grandstream GXV3611HD Firmware: version 1.0.4.11 only
• Grandstream GXV3611LL Firmware: version 1.0.4.11 only
• Grandstream GXV3615P Firmware: version 1.0.4.11 only
• Grandstream GXV3615W Firmware: version 1.0.4.11 only
• Grandstream GXV3615WP Hd Firmware: version 1.0.4.11 only
• Grandstream GXV3651FHD Firmware: version 1.0.4.11 only
• Grandstream GXV3662HD Firmware: version 1.0.4.11 only

Published 2019-12-11. Last modified 2026-06-16.