Vulnerability Details CVE-2012-3002
The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.031
EPSS Ranking 86.1%
CVSS Severity
CVSS v2 Score 10.0
References
- http://foscam.us/forum/h264-ip-camera-web-interface-authentication-bypass-test-tool-t3252.html
- http://secunia.com/advisories/50950
- http://secunia.com/advisories/50966
- http://www.foscam.com/help.aspx?TypeId=11
- http://www.kb.cert.org/vuls/id/265532
- http://www.securityfocus.com/bid/55873
- http://foscam.us/forum/h264-ip-camera-web-interface-authentication-bypass-test-tool-t3252.html
- http://secunia.com/advisories/50950
- http://secunia.com/advisories/50966
- http://www.foscam.com/help.aspx?TypeId=11
- http://www.kb.cert.org/vuls/id/265532
- http://www.securityfocus.com/bid/55873
Products affected by CVE-2012-3002
-
cpe:2.3:h:foscam:h.264_hi3510/11/12_ip_camera:-
-
cpe:2.3:h:wansview:h.264_hi3510/11/12_ip_camera:-