Cisco Video Surveillance 2500 Series IP Cameras Remote Information Disclosure Vulnerability

Bugtraq ID:	35478
Class:	Unknown
CVE:	CVE-2009-2046
Remote:	Yes
Local:	No
Published:	Jun 24 2009 12:00AM
Updated:	Jun 26 2009 12:49AM
Credit:	Cisco
Vulnerable:	Cisco Video Surveillance 2500 Series IP Camera 2.0
Not Vulnerable:	Cisco Video Surveillance 2500 Series IP Camera 2.1

Cisco Video Surveillance 2500 Series IP Cameras Remote Information Disclosure Vulnerability

Cisco Video Surveillance 2500 Series IP Cameras are prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

This issue is tracked by Cisco Bug IDs CSCsu05515 and CSCsr96497.

Versions prior to Cisco Video Surveillance 2500 Series IP Camera firmware 2.1 are vulnerable.

Cisco Video Surveillance 2500 Series IP Cameras Remote Information Disclosure Vulnerability

An attacker can exploit this issue via a browser.

Cisco Video Surveillance 2500 Series IP Cameras Remote Information Disclosure Vulnerability

Solution:
An update is available. Please see the references for details.


Cisco Video Surveillance 2500 Series IP Camera 2.0

• Cisco Cisco Video Surveillance 2500 Series IP Camera firmware version 2.1
  http://tools.cisco.com/support/downloads/go/ReleaseType.x?optPlat=Linu x&isPlatform=Y&mdfid=282052803&sftType=Video+Surveillance+IP+Camera+Fi rmware&treeName=Cisco+Physical+Security&modelName=Cisco+Video+Surveill ance+2500+IP+Camera&mdfLevel=Model&treeMdfId=280588231&modifmdfid=null &imname=&hybrid=null

Cisco Video Surveillance 2500 Series IP Cameras Remote Information Disclosure Vulnerability

References:

• Cisco Video Surveillance 2500 Series IP Cameras Homepage (Cisco)