Lucene search

K
cveMitreCVE-2009-1559
HistoryMay 06, 2009 - 4:30 p.m.

CVE-2009-1559

2009-05-0616:30:00
CWE-22
mitre
web.nvd.nist.gov
26
cve-2009-1559
absolute path traversal
vulnerability
cisco
linksys
wvc54gca
wireless video camera
firmware 1.00r24
nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.007

Percentile

80.4%

Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R24 and possibly 1.00R22 allows remote attackers to read arbitrary files via an absolute pathname in the this_file parameter. NOTE: traversal via a … (dot dot) is probably also possible.

Affected configurations

Nvd
Node
ciscowvc54gcaMatch1.00r22
OR
ciscowvc54gcaMatch1.00r24
VendorProductVersionCPE
ciscowvc54gca1.00r22cpe:2.3:h:cisco:wvc54gca:1.00r22:*:*:*:*:*:*:*
ciscowvc54gca1.00r24cpe:2.3:h:cisco:wvc54gca:1.00r24:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.007

Percentile

80.4%

Related for CVE-2009-1559