CVE-2010-0593
22.04.2010, 14:30
The Cisco RVS4000 4-port Gigabit Security Router before 1.3.2.0, PVC2300 Business Internet Video Camera before 1.1.2.6, WVC200 Wireless-G PTZ Internet Video Camera before 1.1.1.15, WVC210 Wireless-G PTZ Internet Video Camera before 1.1.1.15, and WVC2300 Wireless-G Business Internet Video Camera before 1.1.2.6 do not properly restrict read access to passwords, which allows context-dependent attackers to obtain sensitive information, related to (1) access by remote authenticated users to a PVC2300 or WVC2300 via a crafted URL, (2) leveraging setup privileges on a WVC200 or WVC210, and (3) leveraging administrative privileges on an RVS4000, aka Bug ID CSCte64726.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | pvc2300 | 𝑥 ≤ 1.1.1.4 |
| cisco | wvc200 | 𝑥 ≤ 1.1.0.15 |
| cisco | wvc200 | 1.1.0.12 |
| cisco | wvc210 | 𝑥 ≤ 1.1.0.15 |
| cisco | wvc210 | 1.1.0.12 |
| cisco | wvc2300 | 𝑥 ≤ 1.1.1.4 |
| cisco | rvs4000 | 𝑥 ≤ 1.3.1.0 |
| cisco | rvs4000 | 1.3.0.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References