CVE-2013-2560

published 2013-03-15

CVE-2013-2560: Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a…

Priority P3 53 high 7.8 CVSS 2.0

AV N AC L Au N C C I N A N

EXPLOIT

Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by discovering (1) web credentials or (2) Wi-Fi credentials.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
foscam	fi8919w	<= firmware_11.37.2.47	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22