Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a .. (dot dot) in the READ.filePath parameter.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2013/Jun/84 | Exploit |
Configurations
Information
Published : 2013-10-04 16:55
Updated : 2013-10-07 08:38
NVD link : CVE-2013-3541
Mitre link : CVE-2013-3541
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
ovislink
- airlive_wl2600cam