CVE-2013-3689

CVE-2013-3689 affects Brickcom camera models such as FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E (and possibly others) with firmware 3.0.6.16C1 and earlier. The root cause is an insufficient restriction on access to the file configfile.dump, allowing a remote attacker to retrieve...

CVE-2013-3690

CVE-2013-3690 is a CSRF vulnerability in Brickcom devices (FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E and possibly other models) whose firmware 3.1.0.8 and earlier uses the CGI endpoint cgi-bin/users.cgi to add administrators. The issue allows remote attackers to hijack admin au...