CVE-2013-3689 Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which....
HighCVSS 7.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which allow remote attackers to obtain sensitive information (user names, passwords, and configurations) via a get action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| brickcom 100ap device firmware | <= 3.0.6.16c1 | No fix listed |
| brickcom fb-100ap | All versions | No fix listed |
| brickcom md-100ap | All versions | No fix listed |
| brickcom ob-100ae | All versions | No fix listed |
| brickcom osd-040e | All versions | No fix listed |
| brickcom wcb-100ap | All versions | No fix listed |
| brickcom wfb-100ap | All versions | No fix listed |