CVE-2014-8389

N/A

Descripcion

cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-coded credentials in the embedded Boa web server, which allows remote attackers to obtain user credentials via crafted HTTP requests.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado12/28/2017

Ultima modificacion4/20/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

airlive:bu-2015airlive:bu-2015_firmwareairlive:bu-3026airlive:bu-3026_firmwareairlive:md-3025airlive:md-3025_firmwareairlive:poe-200cam_v2airlive:poe-200cam_v2_firmwareairlive:wl-2000camairlive:wl-2000cam_firmware

Debilidades (CWE)

CWE-78

Referencias

http://packetstormsecurity.com/files/132585/AirLive-Remote-Command-Injection.html(cve@mitre.org)

http://seclists.org/fulldisclosure/2015/Jul/29(cve@mitre.org)

http://www.securityfocus.com/archive/1/535938/100/0/threaded(cve@mitre.org)

http://www.securityfocus.com/bid/75559(cve@mitre.org)

https://www.coresecurity.com/advisories/airlive-multiple-products-os-command-injection(cve@mitre.org)

http://packetstormsecurity.com/files/132585/AirLive-Remote-Command-Injection.html(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2015/Jul/29(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/535938/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/75559(af854a3a-2127-422b-91ae-364da2661108)

https://www.coresecurity.com/advisories/airlive-multiple-products-os-command-injection(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.