PT-2014-3286 · Conceptronic · Conceptronic Cipcamptiwl Camera

Felipe Molina De La Torre · Publicado 2014-01-17 · Atualizado 2018-10-09 · CVE-2013-7204

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Conceptronic CIPCAMPTIWL Camera version 1.0 with firmware 21.37.2.49

Description A cross-site request forgery (CSRF) issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add arbitrary users.

Recommendations For Conceptronic CIPCAMPTIWL Camera version 1.0 with firmware 21.37.2.49, consider disabling access to the set users.cgi script until a patch is available to prevent exploitation of this issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2013-7204

Produtos afetados

Conceptronic Cipcamptiwl Camera

Referências · 5

• 🔥 https://exploit-db.com/exploits/30914 · Exploit
• 🔥 http://exploit-db.com/exploits/30914 · Exploit
• http://securityfocus.com/archive/1/530717/100/0/threaded · Nota
• http://osvdb.org/101930 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7204 · Nota de Segurança