FOSCAM IP-Cameras CVE-2013-2574 Unauthorized Access Vulnerabilities

Bugtraq ID:	61415
Class:	Design Error
CVE:	CVE-2013-2574
Remote:	Yes
Local:	No
Published:	Jul 24 2013 12:00AM
Updated:	Oct 16 2013 01:04AM
Credit:	Flavio de Cristofaro, Andres Blanco
Vulnerable:
Not Vulnerable:

FOSCAM IP-Cameras CVE-2013-2574 Unauthorized Access Vulnerabilities

FOSCAM IP-Cameras are prone to multiple unauthorized-access vulnerabilities.

Attackers can exploit these issues to gain unauthorized access and obtain potentially sensitive information. This may aid in further attacks.

FOSCAM FI8620 is vulnerable; other versions may also be affected.

FOSCAM IP-Cameras CVE-2013-2574 Unauthorized Access Vulnerabilities

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

FOSCAM IP-Cameras CVE-2013-2574 Unauthorized Access Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FOSCAM IP-Cameras CVE-2013-2574 Unauthorized Access Vulnerabilities

References: