CVE-2024-31798

CVE-2024-31798 describes a critical vulnerability in GNCC's GC2 Indoor Security Camera 1080P, where all devices share an identical hardcoded root password. This flaw allows an attacker with physical access to the device to gain full control, leading to high impacts on confidentiality, integrity, and availability. Rated 6.8 MEDIUM on the CVSS scale, the exploit requires physical proximity but no prior authentication or user interaction. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low immediate threat but a persistent risk for affected devices.