11 matches found
CVE-2013-3686
cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action...
Design/Logic Flaw
cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action...
CVE-2013-3686
CVE-2013-3686 affects AirLive IP cameras (notably WL2600CAM); vulnerable component is cgi-bin/operator/param, enabling remote information exposure that can disclose the administrator password via a list action. Also identified in Red Hat/NVD records and corroborated by multiple advisories; affect...
PT-2013-4564
Name of the Vulnerable Software and Affected Versions AirLive WL2600CAM affected versions not specified Description The issue allows remote attackers to obtain the administrator password. This is achieved through the cgi-bin/operator/param endpoint, specifically by utilizing a list action...
CVE-2013-3686: Undefined Security Weakness
cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action...
CVE-2013-3541
Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a .. dot dot in the READ.filePath parameter...
Directory traversal
Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a .. dot dot in the READ.filePath parameter...
CVE-2013-3541
The CVE-2013-3541 entry concerns a directory traversal vulnerability in AirLive devices, specifically the cgi-bin/admin/fileread functionality. The documented flaw allows remote attackers to read arbitrary files by manipulating the READ.filePath parameter (using .. to traverse directories). Affec...
CVE-2013-3541: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a .. dot dot in the READ.filePath parameter...
PT-2013-4471
Name of the Vulnerable Software and Affected Versions AirLive WL2600CAM affected versions not specified Description A directory traversal issue exists in the cgi-bin/admin/fileread endpoint, allowing remote attackers to read arbitrary files by including a .. dot dot in the READ.filePath parameter...
Airlive IP Cameras - Multiple Vulnerabilities
Exploit for hardware platform in category web applications 1.Advisory Information Title: Airlive Multiple Vulnerabilities Date Published: 12/06/2013 Date of last updated: 12/06/2013 2.Vulnerability Description Multiple vulnerabilities have been found in this devices: -CVE-2013-3540. Cross Site...