Authentication flaw

2015-05-1400:59:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.8%

JSON

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote attackers to bypass authentication and obtain sensitive information via a leading “/./” in a request to en/account/accedit.asp.

CPENameOperatorVersion
ycb001_firmwareeq4.30
ycb002_firmwareeq4.30
ycb003_firmwareeq4.30
ycb004_firmwareeq4.30
ycbl03_firmwareeq4.30
ycblb3_firmwareeq4.30
ycblhd5_firmwareeq4.30
yceb03_firmwareeq4.30
yck002_firmwareeq4.30
yck003_firmwareeq4.30

Name	Operator	Version
ycb001_firmware	eq	4.30
ycb002_firmware	eq	4.30
ycb003_firmware	eq	4.30
ycb004_firmware	eq	4.30
ycbl03_firmware	eq	4.30
ycblb3_firmware	eq	4.30
ycblhd5_firmware	eq	4.30
yceb03_firmware	eq	4.30
yck002_firmware	eq	4.30
yck003_firmware	eq	4.30