CVE-2014-9238

The CVE-2014-9238 entry concerns the D-Link DCS-2103 IP camera with firmware 1.0.0. The issue is a remote path disclosure vulnerability: an attacker can obtain the installation path by supplying a file parameter to cgi-bin/sddownload.cgi, demonstrated by a forward slash character. This affects th...