CVE-2020-6852: Cacagoo Tv-288zd-2mp Firmware

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak authentication of TELNET access, leading to root privileges without any password required.

Affected products

• Cacagoo Tv-288zd-2mp Firmware: version 3.4.2.0919 only

Published 2020-04-02. Last modified 2026-06-17.