PT-2012-4426 · Foscam+1 · Foscam Ip Camera+1

Don Kennedy · Publicado 2012-12-21 · Atualizado 2013-03-02 · CVE-2012-3002

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foscam IP cameras (affected versions not specified) Wansview IP cameras (affected versions not specified)

Description The issue allows remote attackers to bypass authentication on the web interface of the affected IP cameras. This enables them to perform administrative functions or read the admin password by making a direct request to an unspecified URL.

Recommendations For Foscam IP cameras, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Wansview IP cameras, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-3002

Produtos afetados

Foscam Ip Camera

Wansview Ip Cameras

Referências · 7

• http://securityfocus.com/bid/55873 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3002 · Nota de Segurança
• http://foscam.com/help.aspx?TypeId=11 · Nota
• http://kb.cert.org/vuls/id/265532 · Nota
• http://secunia.com/advisories/50950 · Nota
• http://foscam.us/forum/h264-ip-camera-web-interface-authentication-bypass-test-tool-t3252.html · Nota
• http://secunia.com/advisories/50966 · Nota