Camtron CMNC-200 Full HD IP Camera Multiple Security Vulnerabilities

Bugtraq ID:	44841
Class:	Unknown
CVE:	CVE-2010-4230 CVE-2010-4231 CVE-2010-4232 CVE-2010-4233 CVE-2010-4234
Remote:	Yes
Local:	No
Published:	Nov 12 2010 12:00AM
Updated:	Nov 18 2010 11:06AM
Credit:	Wendel G. Henrique of Trustwave's SpiderLabs
Vulnerable:	TVSLiveControl TVSLiveControl ActiveX Control 1.6.50.33 Camtron CMNC-200 Full HD IP Camera 1.102A-008
Not Vulnerable:

Camtron CMNC-200 Full HD IP Camera Multiple Security Vulnerabilities

Camtron CMNC-200 Full HD IP Camera is prone to multiple security vulnerabilities.

Exploiting these issues will allow remote attackers to execute arbitrary code, trigger a denial of service, or completely compromise the device.

The vulnerable products are listed below:

Camtron CMNC-200 Full HD IP Camera running firmware 1.102A-008 is vulnerable.
TVSLiveControl 1.6.50.33 is vulnerable; others may also be affected.

Camtron CMNC-200 Full HD IP Camera Multiple Security Vulnerabilities

The following exploits and example URIs are available:

• /data/vulnerabilities/exploits/44841.txt

Camtron CMNC-200 Full HD IP Camera Multiple Security Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Camtron CMNC-200 Full HD IP Camera Multiple Security Vulnerabilities

References:

• Trustwave's SpiderLabs Security Advisory TWSL2010-006 (Trustwave)
  
• TWSL2010-006: Multiple Vulnerabilities in Camtron CMNC-200 IP Camera (Trustwave Advisories)
  
• Vendor Homepage (Camtron)