PT-2013-3842 · Foscam · Foscam

Published 2013-03-15 · Updated 2013-03-20 · CVE-2013-2560

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foscam devices with firmware prior to 11.37.2.49

Description A directory traversal issue exists in the web interface, allowing remote attackers to read arbitrary files by including a .. (dot dot) in the URI. This could potentially lead to the discovery of web credentials or Wi-Fi credentials.

Recommendations For Foscam devices with firmware prior to 11.37.2.49, update the firmware to version 11.37.2.49 or later to resolve the issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2013-2560

Affected Products

Foscam

References · 3

• 🔥 https://exploit-db.com/exploits/38356 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-2560 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2013-03/0080.html · Note