Rurapenthe

**Name of the Vulnerable Software and Affected Versions** Intellinet NFC-30ir IP Camera version LM.1.6.16.05 **Description** A directory traversal issue exists in the web-based management site of the affected device, allowing remote attackers to read arbitrary files. This is possible due to a lack of URI/path sanitization in a vendor-supplied CGI script used to read HTML text files. **Recommendations** For Intellinet NFC-30ir IP Camera version LM.1.6.16.05, consider restricting access to the vulnerable CGI script until a patch is available. As a temporary workaround, avoid using the web-based management site for sensitive operations. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intellinet NFC-30ir IP Camera (affected versions not specified) **Description** The issue concerns a vendor backdoor that allows a remote attacker to access a vendor-supplied CGI script in the web directory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.