Vulnerabilities

TI-2013-03219 CVE-2013-3686 · GHSA-23g4-p36x-phr8

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows…

HIGH 65

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.27567 Published 2013-10-11 No fix listed CWE-264

TI-2013-03098 CVE-2013-3541 · GHSA-jg24-xr48-f463

Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and…

MEDIUM 46

Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a ..

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.08933 Published 2013-10-04 No fix listed CWE-22

TI-2013-03096 CVE-2013-3539 · GHSA-c3jm-vwq8-2rp9

Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC…

MEDIUM 41

Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera mo…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.08756 Published 2013-10-01 No fix listed CWE-352

Vulnerabilities

Filters

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows…

Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and…

Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC…