The vulnerability in cgi_test.cgi of the built-in microprogramming software for IP cameras from AirLive – models BU-3026, BU-2015, and MD-3025 – allows a intruder to execute arbitrary commands on the operating system.

The vulnerability in cgitest.cgi of the built-in microprogramming software for AirLive BU-3026, AirLive BU-2015, and AirLive MD-3025 exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious...

Design/Logic Flaw

cgitest.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to execute arbitrary OS commands via shell metacharacters after an "&" ampersand in the writemac writepid, writemsn, writetan, or writehdv parameter...

AirLive IP Monitor Command Injection Vulnerability

Airlive is an IP surveillance network solution provider and security product vendor. An OS command injection vulnerability exists in the cgitest.cgi binary file when the AirLive MD-3025, BU-3026, BU-2015 cameras process certain parameters. An attacker can exploit this vulnerability to inject...