high7.8
CVE-2013-3689
Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly r…
Impact
Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which allow remote attackers to obtain sensitive information (user names, passwords, and configurations) via a get action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Brickcom | 100ap Device Firmware | through 3.0.6.16c1 |
| Brickcom | Fb-100ap | All versions |
| Brickcom | Md-100ap | All versions |
| Brickcom | Ob-100ae | All versions |
| Brickcom | Osd-040e | All versions |
| Brickcom | Wcb-100ap | All versions |
| Brickcom | Wfb-100ap | All versions |