Lucene search

K
jvnJapan Vulnerability NotesJVN:94592501
HistoryJul 29, 2014 - 12:00 a.m.

JVN#94592501: Multiple I-O DATA IP Cameras vulnerable to authentication bypass

2014-07-2900:00:00
Japan Vulnerability Notes
jvn.jp
19

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

68.2%

Multiple IP Cameras provided by I-O DATA contain an authentication bypass vulnerability.

Impact

An attacker who can access the product may be able to gain access to configuration and credential information. As a result, the attacker may take control of the product.

Solution

Apply an update
Update to the latest version of the firmware according to the information provided by the developer.

Products Affected

  • TS-WLCAM firmware version 1.06 and earlier
  • TS-WLCAM/V firmware version 1.06 and earlier
  • TS-WPTCAM firmware version 1.08 and earlier
  • TS-PTCAM firmware version 1.08 and earlier
  • TS-PTCAM/POE firmware version 1.08 and earlier
  • TS-WLC2 firmware version 1.02 and earlier

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

68.2%

Related for JVN:94592501