Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 4 min 162 bronnen
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-1900

MEDIUM · 5.0 CVSS Gepubliceerd: CWE-200

Beschrijving

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote attackers to bypass authentication and obtain sensitive information via a leading "/./" in a request to en/account/accedit.asp.

Vendors

Y-cam

Affected products

Ycb002 Firmware Ycb002 Ycb004 Firmware Ycb004 Ycw003 Firmware Ycw003 Ycb001 Firmware Ycb001 Ycblhd5 Firmware Ycblhd5 Ycbl03 Firmware Ycbl03 Ycblb3 Firmware Ycblb3 Ycw001 Firmware Ycw001 Yck004 Firmware Yck004 Yck003 Firmware Yck003 Ycw004 Firmware Ycw004 Ycb003 Firmware Ycb003 Yceb03 Firmware Yceb03 Ycw002 Firmware Ycw002 Yck002 Firmware Yck002

References