[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Camtron CMNC-200 IP Camera Authentication Bypass

Author
Trustwave's Spide.
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-14813
Category
web applications
Date add
14-11-2010
Platform
hardware
================================================
Camtron CMNC-200 IP Camera Authentication Bypass
================================================

The CMNC-200 IP Camera has an administrative web
interface that does not handle authentication properly.
Using a properly formatted request, an attacker can bypass
the authentication mechanism.
 
The first example requires authentication:
http://www.ipcamera.com/system.html
 
When a second forward slash is placed after the hostname,
authentication is not required.
http://www.ipcamera.com//system.html
 
This vulnerability allows an attacker to take full control of
the IP Camera.
 
Vendor Response:
No response received.
 
Remediation Steps:
No patch currently exists for this issue. To limit exposure,
network access to these devices should be limited to authorized
personnel through the use of Access Control Lists and proper
network segmentation.



#  0day.today [2024-09-28]  #