Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which allow remote attackers to obtain sensitive information (user names, passwords, and configurations) via a get action.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
04 Mar 2025, 19:48
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Brickcom osd-040e
Brickcom wfb-100ap Brickcom fb-100ap Brickcom wcb-100ap Brickcom md-100ap Brickcom ob-100ae Brickcom Brickcom 100ap Device Firmware |
|
| CPE | cpe:2.3:o:brickom:100ap_device_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:brickom:osd-040e:-:*:*:*:*:*:*:* cpe:2.3:h:brickom:wcb-100ap:-:*:*:*:*:*:*:* cpe:2.3:h:brickom:fb-100ap:-:*:*:*:*:*:*:* cpe:2.3:h:brickom:ob-100ae:-:*:*:*:*:*:*:* cpe:2.3:h:brickom:wfb-100ap:-:*:*:*:*:*:*:* |
cpe:2.3:o:brickcom:100ap_device_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:brickcom:osd-040e:-:*:*:*:*:*:*:* cpe:2.3:h:brickcom:fb-100ap:-:*:*:*:*:*:*:* cpe:2.3:h:brickcom:wfb-100ap:-:*:*:*:*:*:*:* cpe:2.3:h:brickcom:wcb-100ap:-:*:*:*:*:*:*:* cpe:2.3:h:brickcom:md-100ap:-:*:*:*:*:*:*:* cpe:2.3:h:brickcom:ob-100ae:-:*:*:*:*:*:*:* |
21 Nov 2024, 01:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://seclists.org/fulldisclosure/2013/Jun/84 - |
Information
Published : 2013-10-04 23:55
Updated : 2025-04-11 00:51
NVD link : CVE-2013-3689
Mitre link : CVE-2013-3689
CVE.ORG link : CVE-2013-3689
JSON object : View
Products Affected
brickcom
- fb-100ap
- wfb-100ap
- md-100ap
- ob-100ae
- wcb-100ap
- 100ap_device_firmware
- osd-040e
CWE
CWE-264
Permissions, Privileges, and Access Controls