CVE-2014-1901

🗓️ 14 May 2015 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 58 Views🌐 WEB

CVE-2014-1901: Y-Cam camera models allow remote authenticated users to cause denial of service

Reporter	Title	Published	Views	Family All 5
CNVD	Denial of Service Vulnerability in Various Y-Cam Products	15 May 201500:00	–	cnvd
Cvelist	CVE-2014-1901	14 May 201500:00	–	cvelist
EUVD	EUVD-2014-1963	7 Oct 202500:30	–	euvd
NVD	CVE-2014-1901	14 May 201500:59	–	nvd
Prion	Authentication flaw	14 May 201500:59	–	prion

NVD

Node

y-cam yceb03_firmwareMatch4.30

AND

Node

y-cam ycb004_firmwareMatch4.30

AND

Node

y-cam ycb002_firmwareMatch4.30

AND

Node

y-cam ycbl03_firmwareMatch4.30

AND

Node

y-cam ycblb3_firmwareMatch4.30

AND

Node

y-cam yck002_firmwareMatch4.30

AND

Node

y-cam ycblhd5_firmwareMatch4.30

AND

Node

y-cam ycw003_firmwareMatch4.30

AND

Node

y-cam ycw001_firmwareMatch4.30

AND

Node

y-cam ycw002_firmwareMatch4.30

AND

Node

y-cam ycb001_firmwareMatch4.30

AND

Node

y-cam ycw004_firmwareMatch4.30

AND

Node

y-cam yck003_firmwareMatch4.30

AND

Node

y-cam yck004_firmwareMatch4.30

AND

Node

y-cam ycb003_firmwareMatch4.30

AND

Source	Link
trustwave	www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-007/
y-cam	www.y-cam.com/y-cam-security-fix/

Parameter	Position	Path	Description	CWE
path	path	/en/store_main.asp	Remote authenticated unauthenticated disclosure? Denial of service via malformed path parameter.	CWE-20
item	query param	/en/account/accedit.asp	Denial of service via malformed item parameter in account edit endpoint.	CWE-20
emailid	query param	/en/smtpclient.asp	Denial of service via malformed emailid parameter in SMTP client endpoint.	CWE-20

06 May 2026 22:30Current

6.9Medium risk

Vulners AI Score6.9

CVSS 26.8

EPSS0.00623

cve-2014-1901 y-cam camera remote authenticated denial of service firmware vulnerability