high7.8Public exploit code
CVE-2013-2560
Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Foscam < 11.37.2.49 - Directory Traversal2013-03-01 · remote · hardware · Verified
Impact
Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by discovering (1) web credentials or (2) Wi-Fi credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foscam | Fi8919w | through firmware_11.37.2.47 |