Multiple Trendnet Camera Products Remote Security Bypass Vulnerability

Bugtraq ID:	51922
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 10 2012 12:00AM
Updated:	Jan 10 2012 12:00AM
Credit:	console-cowboys
Vulnerable:	Trendnet TV-VS1P V1.0R 0 Trendnet TV-VS1 1.0R 0 Trendnet TV-IP422WN V1.0R 0 Trendnet TV-IP422W A1.0R 0 Trendnet TV-IP422 A1.0R 0 Trendnet TV-IP410WN 1.0R 0 Trendnet TV-IP410W A1.0R 0 Trendnet TV-IP410 A1.0R 0 Trendnet TV-IP322P 1.0R 0 Trendnet TV-IP312WN 1.0R 0 Trendnet TV-IP312W A1.0R 0 Trendnet TV-IP312 A1.0R 0 Trendnet TV-IP252P B1.xR 0 Trendnet TV-IP212W A1.0R 0 Trendnet TV-IP212 A1.0R 0 Trendnet TV-IP121WN v2.0R 0 Trendnet TV-IP121WN 1.0R 0 Trendnet TV-IP121W A1.0R 0 Trendnet TV-IP110WN 2.0R 0 Trendnet TV-IP110WN 1.0R Trendnet TV-IP110W A1.0R 0 Trendnet TV-IP110 A1.0R 0
Not Vulnerable:

Multiple Trendnet Camera Products Remote Security Bypass Vulnerability

Multiple Trendnet Camera products are prone to a remote security-bypass vulnerability.

Successfully exploiting this issue will allow remote attackers to gain access to a live stream from the camera.

Multiple Trendnet Camera Products Remote Security Bypass Vulnerability

The following example URI is available:

http://www.example.com/anony/mjpg.cgi

Multiple Trendnet Camera Products Remote Security Bypass Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Multiple Trendnet Camera Products Remote Security Bypass Vulnerability

References:

• New TRENDnet IP Camera Firmware Eliminates Security Threat (Trendnet)
  
• SecurView Wireless Internet Camera Homepage (Trendnet)
  
• Trendnet Cameras Vulnerability (Console Cowboys)