Lucene search

[email protected]NVD:CVE-2014-1901

HistoryMay 14, 2015 - 12:59 a.m.

CVE-2014-1901

2015-05-1400:59:01

CWE-20

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote authenticated users to cause a denial of service (reboot) via a malformed (1) path parameter to en/store_main.asp, (2) item parameter to en/account/accedit.asp, or (3) emailid parameter to en/smtpclient.asp. NOTE: this issue can be exploited without authentication by leveraging CVE-2014-1900.

Affected configurations

NVD

Node

y-camyceb03_firmwareMatch4.30

AND

y-camyceb03

Node

y-camycb004_firmwareMatch4.30

AND

y-camycb004

Node

y-camycb002_firmwareMatch4.30

AND

y-camycb002

Node

y-camycbl03_firmwareMatch4.30

AND

y-camycbl03

Node

y-camycblb3_firmwareMatch4.30

AND

y-camycblb3

Node

y-camyck002_firmwareMatch4.30

AND

y-camyck002

Node

y-camycblhd5_firmwareMatch4.30

AND

y-camycblhd5

Node

y-camycw003_firmwareMatch4.30

AND

y-camycw003

Node

y-camycw001_firmwareMatch4.30

AND

y-camycw001

Node

y-camycw002_firmwareMatch4.30

AND

y-camycw002

Node

y-camycb001_firmwareMatch4.30

AND

y-camycb001

Node

y-camycw004_firmwareMatch4.30

AND

y-camycw004

Node

y-camyck003_firmwareMatch4.30

AND

y-camyck003

Node

y-camyck004_firmwareMatch4.30

AND

y-camyck004

Node

y-camycb003_firmwareMatch4.30

AND

y-camycb003

References

www.y-cam.com/y-cam-security-fix/

www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-007/?fid=3850

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON

Related for NVD:CVE-2014-1901

prion2 cvelist2 cve2 nvd1