Directory traversal

2009-05-0616:30:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.8%

JSON

Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. (encoded dot dot) or an absolute pathname in the next_file parameter.

CPENameOperatorVersion
wvc54gcaeq1.0.0-r24
wvc54gcaeq1.0.0-r22

CPE	Name	Operator	Version
	wvc54gca	eq	1.0.0-r24
	wvc54gca	eq	1.0.0-r22

References

www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/

www.securityfocus.com/bid/34713

www.vupen.com/english/advisories/2009/1173

exchange.xforce.ibmcloud.com/vulnerabilities/50231