CVE-2014-1900
Medium
Description
Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote attackers to bypass authentication and obtain sensitive information via a leading "/./" in a request to en/account/accedit.asp.
SeverityMedium
CVSS5.0
Exploit probability74. percentile1.5%
ProductY-cam Ycb002 Firmware
PublishedMay 14, 2015
First seenMay 14, 2015
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| y-cam ycb002_firmware | 4.30 | — |
| y-cam ycb004_firmware | 4.30 | — |
| y-cam ycw003_firmware | 4.30 | — |
| y-cam ycb001_firmware | 4.30 | — |
| y-cam ycblhd5_firmware | 4.30 | — |
| y-cam ycbl03_firmware | 4.30 | — |
| y-cam ycbl03 | No range specified | — |
| y-cam ycblb3_firmware | 4.30 | — |
| y-cam ycblb3 | No range specified | — |
| y-cam ycw001_firmware | 4.30 | — |
| y-cam yck004_firmware | 4.30 | — |
| y-cam yck003_firmware | 4.30 | — |
| y-cam ycw004_firmware | 4.30 | — |
| y-cam ycw004 | No range specified | — |
| y-cam ycb003_firmware | 4.30 | — |
| y-cam yceb03_firmware | 4.30 | — |
| y-cam ycw002_firmware | 4.30 | — |
| y-cam yck002_firmware | 4.30 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.