Unscored severity · published Mar 15, 2013
CVE-2013-2560
Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a
–
CVSS
9.3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by discovering (1) web credentials or (2) Wi-Fi credentials.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.3% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Fi8919w · Foscam
through firmware_11.37.2.47 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2560
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2560
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-03/0080.html
More from Fi8919w
–
CVE-2014-1911
The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain sensitive video and image data via a blank username and password