CVE-2010-4231 Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote att...
HighCVSS 7.8
EPSS 18.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| camtron cmnc-200 firmware | = 1.102a-008 | No fix listed |
| camtron cmnc-200 | All versions | No fix listed |
| tecvoz cmnc-200 firmware | = 1.102a-008 | No fix listed |
| tecvoz cmnc-200 | All versions | No fix listed |
References
- 15505 exploit
- 20101112 TWSL2010-006: Multiple Vulnerabilities in Camtron CMNC-200 IP Camera mailing-list
- www.trustwave.com exploit