Camtron Cmnc-200 Firmware vulnerabilities
5 known vulnerabilities affecting camtron/cmnc-200_firmware.
Total CVEs
5
CISA KEV
0
Public exploits
5
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH2
Vulnerabilities
Page 1 of 1
CVE-2010-4233P2CRITICALCVSS 10.0PoCv1.102a-0082010-11-17
CVE-2010-4233 [CRITICAL] CWE-255 CVE-2010-4233: The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Ca
The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access via the TELNET interface.
nvd
CVE-2010-4232P2CRITICALCVSS 10.0PoCv1.102a-0082010-11-17
CVE-2010-4232 [CRITICAL] CWE-287 CVE-2010-4232: The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200
The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // (slash slash) at the beginning of a URI, as demonstrated by the //system.html URI.
nvd
CVE-2010-4231P3HIGHCVSS 7.8PoCv1.102a-0082010-11-17
CVE-2010-4231 [HIGH] CWE-22 CVE-2010-4231: Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200
Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
nvd
CVE-2010-4230P3CRITICALCVSS 9.3PoCv1.102a-0082010-11-17
CVE-2010-4230 [CRITICAL] CWE-119 CVE-2010-4230: Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera
Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method.
nvd
CVE-2010-4234P3HIGHCVSS 7.8PoCv1.102a-0082010-11-17
CVE-2010-4234 [HIGH] CWE-399 CVE-2010-4234: The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera wit
The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to cause a denial of service (device reboot) via a large number of requests in a short time interval.
nvd