Linksys WVC54GC Wireless-G Internet Video Camera Information Disclosure Vulnerability
BID:32666
Info
Linksys WVC54GC Wireless-G Internet Video Camera Information Disclosure Vulnerability
| Bugtraq ID: | 32666 |
| Class: | Design Error |
| CVE: |
CVE-2008-4390 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 05 2008 12:00AM |
| Updated: | Dec 11 2008 08:01PM |
| Credit: | Andre Protas of eEye who in turn also credits Greg Linares of eEye |
| Vulnerable: |
Linksys WVC54GC Wireless-G Internet Video Camera 1.19 |
| Not Vulnerable: |
Linksys WVC54GC Wireless-G Internet Video Camera 1.25 |
Discussion
Linksys WVC54GC Wireless-G Internet Video Camera Information Disclosure Vulnerability
Linksys WVC54GC Wireless-G Internet Video Camera is prone to an information-disclosure vulnerability because it fails to encrypt sensitive information before transmitting it over the network.
Exploiting this issue can allow a remote attacker to harvest sensitive information. This can facilitate further attacks such as intercepting video streams, accessing wireless authentication credentials, causing a denial of service, or modifying the device's firmware.
Firmware for the Linksys WVC54GC Wireless-G Internet Video Camera prior to version 1.25 is affected.
Linksys WVC54GC Wireless-G Internet Video Camera is prone to an information-disclosure vulnerability because it fails to encrypt sensitive information before transmitting it over the network.
Exploiting this issue can allow a remote attacker to harvest sensitive information. This can facilitate further attacks such as intercepting video streams, accessing wireless authentication credentials, causing a denial of service, or modifying the device's firmware.
Firmware for the Linksys WVC54GC Wireless-G Internet Video Camera prior to version 1.25 is affected.
Exploit / POC
Linksys WVC54GC Wireless-G Internet Video Camera Information Disclosure Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linksys WVC54GC Wireless-G Internet Video Camera Information Disclosure Vulnerability
Solution:
The vendor has released updated firmware to address this issue. Please see the references for more information.
Solution:
The vendor has released updated firmware to address this issue. Please see the references for more information.
References
Linksys WVC54GC Wireless-G Internet Video Camera Information Disclosure Vulnerability
References:
References: