Lucene search

K
cve[email protected]CVE-2013-2560
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-2560

2022-10-0316:14:59
CWE-22
web.nvd.nist.gov
28
cve-2013-2560
directory traversal
web interface
foscam
firmware
remote attack
file read

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

7 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.4%

Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a … (dot dot) in the URI, as demonstrated by discovering (1) web credentials or (2) Wi-Fi credentials.

Affected configurations

NVD
Node
foscamfi8919wRangefirmware_11.37.2.47

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

7 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.4%