The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-network keys in cleartext in (1) pass_wd.htm and (2) Wsecurity.htm, which allows remote attackers to obtain sensitive information by reading the HTML source code.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wvc54gc | Cisco | 1.00r22 (including) | 1.00r22 (including) |
| Wvc54gc | Cisco | 1.00r24 (including) | 1.00r24 (including) |
References
- http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/
- http://www.vupen.com/english/advisories/2009/1173
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50410
- http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-4/
- http://www.vupen.com/english/advisories/2009/1173
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50410