Lucene search

[email protected]CVE-2014-1900

HistoryMay 14, 2015 - 12:59 a.m.

CVE-2014-1900

2015-05-1400:59:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2014-1900

y-cam camera

remote attackers

authentication bypass

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote attackers to bypass authentication and obtain sensitive information via a leading “/./” in a request to en/account/accedit.asp.

Affected configurations

NVD

Node

y-camycb002_firmwareMatch4.30

AND

y-camycb002

Node

y-camycb004_firmwareMatch4.30

AND

y-camycb004

Node

y-camycw003_firmwareMatch4.30

AND

y-camycw003

Node

y-camycb001_firmwareMatch4.30

AND

y-camycb001

Node

y-camycblhd5_firmwareMatch4.30

AND

y-camycblhd5

Node

y-camycbl03_firmwareMatch4.30

AND

y-camycbl03

Node

y-camycblb3_firmwareMatch4.30

AND

y-camycblb3

Node

y-camycw001_firmwareMatch4.30

AND

y-camycw001

Node

y-camyck004_firmwareMatch4.30

AND

y-camyck004

Node

y-camyck003_firmwareMatch4.30

AND

y-camyck003

Node

y-camycw004_firmwareMatch4.30

AND

y-camycw004

Node

y-camycb003_firmwareMatch4.30

AND

y-camycb003

Node

y-camyceb03_firmwareMatch4.30

AND

y-camyceb03

Node

y-camycw002_firmwareMatch4.30

AND

y-camycw002

Node

y-camyck002_firmwareMatch4.30

AND

y-camyck002

CPENameOperatorVersion
y-cam:ycb002_firmwarey-cam ycb002 firmwareeq4.30

CPE	Name	Operator	Version
y-cam:ycb002_firmware	y-cam ycb002 firmware	eq	4.30

References

www.y-cam.com/y-cam-security-fix/

www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-007/?fid=3850

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON

Related for CVE-2014-1900

prion2 nvd2 cvelist2 cve1