Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 5 min 162 bronnen
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-1901

MEDIUM · 6.8 CVSS Gepubliceerd: CWE-20

Beschrijving NL

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote authenticated users to cause a denial of service (reboot) via a malformed (1) path parameter to en/store_main.asp, (2) item parameter to en/account/accedit.asp, or (3) emailid parameter to en/smtpclient.asp. NOTE: this issue can be exploited without authentication by leveraging CVE-2014-1900.

Origineel (Engels) tonen

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote authenticated users to cause a denial of service (reboot) via a malformed (1) path parameter to en/store_main.asp, (2) item parameter to en/account/accedit.asp, or (3) emailid parameter to en/smtpclient.asp. NOTE: this issue can be exploited without authentication by leveraging CVE-2014-1900.

Vendors

Y-cam

Affected products

Yceb03 Firmware Yceb03 Ycb004 Firmware Ycb004 Ycb002 Firmware Ycb002 Ycbl03 Firmware Ycbl03 Ycblb3 Firmware Ycblb3 Yck002 Firmware Yck002 Ycblhd5 Firmware Ycblhd5 Ycw003 Firmware Ycw003 Ycw001 Firmware Ycw001 Ycw002 Firmware Ycw002 Ycb001 Firmware Ycb001 Ycw004 Firmware Ycw004 Yck003 Firmware Yck003 Yck004 Firmware Yck004 Ycb003 Firmware Ycb003

References