Lucene search

CertccCVE-2008-4390

HistoryDec 09, 2008 - 12:30 a.m.

CVE-2008-4390

2008-12-0900:30:00

CWE-319

certcc

web.nvd.nist.gov

cisco

linksys

wvc54gc

wireless video camera

firmware

vulnerability

remote management

cleartext data

sensitive information

nvd

cve-2008-4390

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.003

Percentile

69.5%

JSON

The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network.

Affected configurations

Nvd

Node

ciscolinksys_wvc54gc_firmwareRange<1.25

AND

ciscolinksys_wvc54gcMatch-

VendorProductVersionCPE
ciscolinksys_wvc54gc_firmware*cpe:2.3:o:cisco:linksys_wvc54gc_firmware:*:*:*:*:*:*:*:*
ciscolinksys_wvc54gc-cpe:2.3:h:cisco:linksys_wvc54gc:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	linksys_wvc54gc_firmware	*	cpe:2.3:o:cisco:linksys_wvc54gc_firmware::::::::
cisco	linksys_wvc54gc	-	cpe:2.3:h:cisco:linksys_wvc54gc:-:::::::*

References

secunia.com/advisories/33032

www.kb.cert.org/vuls/id/528993

www.kb.cert.org/vuls/id/MAPG-7HJKSA

www.linksys.com/servlet/Satellite?blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=text%2Fplain&blobheadervalue2=inline%3B+filename%3DWVC54GC-V1.0_non-RoHS-v1.25_fw_ver.txt&blobkey=id&blobtable=MungoBlobs&blobwhere=1193776031728&ssbinary=true&lid=8104724130B17

www.securityfocus.com/bid/32666

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.003

Percentile

69.5%

JSON

Related for CVE-2008-4390