Lucene search
HistoryDec 21, 2012 - 11:47 a.m.
CVE-2012-3002
security
vulnerability
web interface
ip cameras
authentication
remote attackers
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.7%
The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL.
Affected configurations
Node
foscamh.264_hi3510\/11\/12_ip_cameraMatch-
ORwansviewh.264_hi3510\/11\/12_ip_cameraMatch-
Related
nvd
nvd
CVE-2012-3002
2012-12-21 11:47:36
cvelist
cvelist
CVE-2012-3002
2012-12-21 11:00:00
prion
prion
Authentication flaw
2012-12-21 11:47:00
cert
cert
Multi-vendor IP camera web interface authentication bypass
2012-10-10 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.7%
Related for CVE-2012-3002