CVE-2015-2280 snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands vi...
HighCVSS 8.8
EPSS 17.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| airlink101 skyipcam1620w wireless n mpeg4 3gpp firmware | = 1.1.0-12_20120709 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection exploit mailing-list third-party-advisory vdb-entry
- 20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection mailing-list
- 75597 third-party-advisory vdb-entry
- www.coresecurity.com exploit technical-description third-party-advisory
- 37527 exploit third-party-advisory vdb-entry