PT-2013-3842 · Foscam · Foscam

Publicado

2013-03-15

·

Atualizado

2013-03-20

·

CVE-2013-2560

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Foscam devices with firmware prior to 11.37.2.49
Description A directory traversal issue exists in the web interface, allowing remote attackers to read arbitrary files by including a .. (dot dot) in the URI. This could potentially lead to the discovery of web credentials or Wi-Fi credentials.
Recommendations For Foscam devices with firmware prior to 11.37.2.49, update the firmware to version 11.37.2.49 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2013-2560

Produtos afetados

Foscam