EUVD-2013-3475

Malware in sbrugna...

CVE-2013-3686

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action...

CVE-2013-3541

Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a .. dot dot in the READ.filePath parameter...

CVE-2013-3687

AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file...

CVE-2013-3540

Cross-site request forgery CSRF vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users...

CVE-2013-3691

AirLive POE-2600HD allows remote attackers to cause a denial of service device reset via a long URL...

Design/Logic Flaw

AirLive POE-2600HD allows remote attackers to cause a denial of service device reset via a long URL...

CVE-2013-3691

CVE-2013-3691 affects AirLive POE-2600HD devices. The vulnerability allows a remote attacker to cause a denial of service (device reset) by sending a long URL. The public records describe the impact as availability loss with no confidentiality/integrity impact. No technical details beyond this ar...

CVE-2013-3691

AirLive POE-2600HD allows remote attackers to cause a denial of service device reset via a long URL...

EUVD-2013-3624

AirLive POE-2600HD allows remote attackers to cause a denial of service device reset via a long URL...

CVE-2014-8389

cgi-bin/mft/wirelessmft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-code...

CVE-2014-8389

cgi-bin/mft/wirelessmft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-code...

Hardcoded credentials

cgi-bin/mft/wirelessmft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-code...

CVE-2014-8389

cgi-bin/mft/wirelessmft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-code...

CVE-2014-8389

CVE-2014-8389 affects AirLive IP cameras (MD-3025, BU-3026, BU-2015, WL-2000CAM, POE-200CAM). The vulnerability is an OS command injection in the CGI binaries: cgi_test.cgi on the MD-3025/BU-3026/BU-2015 (injection via certain parameters such as write_tan, etc.), and wireless_mft.cgi on WL-2000CA...

Design/Logic Flaw

cgitest.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to execute arbitrary OS commands via shell metacharacters after an "&" ampersand in the writemac writepid, writemsn, writetan, or writehdv parameter...

CVE-2015-2279

cgitest.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to execute arbitrary OS commands via shell metacharacters after an "&" ampersand in the writemac writepid, writemsn, writetan, or writehdv parameter...

CVE-2015-2279

CVE-2015-2279 is an OS command injection in AirLive cgi_test.cgi on MD-3025, BU-3026 and BU-2015 cameras (firmware listed in advisories). The vulnerability arises when handling certain parameters (write_mac, write_pid, write_msn, write_tan, write_hdv); after an ampersand, the attacker can influen...

Multiple Airlive IP Cameras backup file information disclosure vulnerability

No description provided by source...

Airlive WL-2600CAM IP Camera information disclosure vulnerability

No description provided by source...