Directory Traversal in Camera Web Server

vendor:

CMNC-200 IP Camera

by:

N/A

CVSS

N/A

Directory Traversal

CWE

Product Name: CMNC-200 IP Camera

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: CVE-2010-4231

CPE: N/A

Metasploit: https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2014-0222/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2014-0339/

Other Scripts: N/A

Tags: cve,cve2010,iot,lfi,camera,edb

CVSS Metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N

Nuclei References: https://nvd.nist.gov/vuln/detail/CVE-2010-4231, https://www.exploit-db.com/exploits/15505, https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt, http://www.exploit-db.com/exploits/15505/

Nuclei Metadata: {'max-request': 1, 'vendor': 'camtron', 'product': 'cmnc-200_firmware'}

Platforms Tested: N/A

2010

Directory Traversal in Camera Web Server

The CMNC-200 IP Camera has a built-in web server that is vulnerable to directory transversal attacks, allowing access to any file on the camera file system.

Mitigation:

To limit exposure, network access to these devices should be limited to authorized personnel through the use of Access Control Lists and proper network segmentation.

Source

Exploit-DB raw data:

Finding 2: Directory Traversal in Camera Web Server
CVE: CVE-2010-4231

The CMNC-200 IP Camera has a built-in web server that
is enabled by default. The server is vulnerable to directory
transversal attacks, allowing access to any file on the
camera file system.

The following example will display the contents of
/etc/passwd:

GET /../../../../../../../../../../../../../etc/passwd
HTTP/1.1

Because the web server runs as root, an attacker can read
critical files like /etc/shadow from the web-based
administration interface. Authentication is not required for
exploitation.

Vendor Response:
No response received.

Remediation Steps:
No patch currently exists for this issue. To limit exposure,
network access to these devices should be limited to authorized
personnel through the use of Access Control Lists and proper
network segmentation.