CVE-2009-1558

Cisco Linksys WVC54GCA cameras with firmware 1.00R22/1.00R24 are vulnerable to local file inclusion in adm/file.cgi via the next_file parameter (using %2e or an absolute pathname). This allows reading arbitrary files on the device. The Nuclei template confirms a Local File Inclusion against the s...

CVE-2009-1556

CVE-2009-1556 (Linksys WVC54GCA) affects Cisco Linksys WVC54GCA wireless video camera firmware 1.00R22 and 1.00R24. The flaw is in the img/main.cgi component, where an attacker with remote authentication can read arbitrary files from the img/ directory by supplying a filename in the next_file par...

CVE-2009-1559

The CVE-2009-1559 entry relates to an absolute path traversal vulnerability in the adm/file.cgi component of the Cisco Linksys WVC54GCA wireless video camera. Affected firmware is listed as 1.00R24 and possibly 1.00R22. The vulnerability allows remote attackers to read arbitrary files by supplyin...

CVE-2009-1555

The CVE-2009-1555 entry concerns the Cisco Linksys WVC54GCA wireless video camera. Affected firmware is 1.00R22 and 1.00R24. The issue arises when the device responds to a Setup Wizard remote-management command by exposing configuration data, enabling remote attackers to obtain sensitive informat...

CVE-2009-1557

CVE-2009-1557 affects Cisco Linksys WVC54GCA cameras (firmware 1.00R22/1.00R24). The vulnerability is multiple XSS in the web UI CGI endpoints: main.cgi, img/main.cgi, adm/file.cgi, via next_file or this_file parameters. Impact: remote attacker could inject arbitrary script in the context of the ...