PT-2012-4426 · Foscam+1 · Foscam Ip Camera+1

Don Kennedy · Published 2012-12-21 · Updated 2013-03-02 · CVE-2012-3002

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foscam IP cameras (affected versions not specified) Wansview IP cameras (affected versions not specified)

Description The issue allows remote attackers to bypass authentication on the web interface of the affected IP cameras. This enables them to perform administrative functions or read the admin password by making a direct request to an unspecified URL.

Recommendations For Foscam IP cameras, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Wansview IP cameras, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-3002

Affected Products

Foscam Ip Camera

Wansview Ip Cameras

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-3002 · Security Note
• http://securityfocus.com/bid/55873 · Note
• http://foscam.com/help.aspx?TypeId=11 · Note
• http://kb.cert.org/vuls/id/265532 · Note
• http://secunia.com/advisories/50950 · Note
• http://foscam.us/forum/h264-ip-camera-web-interface-authentication-bypass-test-tool-t3252.html · Note
• http://secunia.com/advisories/50966 · Note