CVE-2010-4232 The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a...
HighCVSS 10.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // (slash slash) at the beginning of a URI, as demonstrated by the //system.html URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| camtron cmnc-200 firmware | = 1.102a-008 | No fix listed |
| camtron cmnc-200 | All versions | No fix listed |
| tecvoz cmnc-200 firmware | = 1.102a-008 | No fix listed |
| tecvoz cmnc-200 | All versions | No fix listed |
References
- 15506 exploit
- 20101112 TWSL2010-006: Multiple Vulnerabilities in Camtron CMNC-200 IP Camera mailing-list
- www.trustwave.com exploit