QwikSec

Security Database

CVE

CWE

Training

CVE-2014-8389

Published: Dec 27, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-coded credentials in the embedded Boa web server, which allows remote attackers to obtain user credentials via crafted HTTP requests.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20150706 [CORE-2015-0012] - AirLive Multiple Products OS Command Injection

mailing-list

x_refsource_BUGTRAQ

http://packetstormsecurity.com/files/132585/AirLive-Remote-Command-Injection.html

x_refsource_MISC

20151231 [CORE-2015-0012] - AirLive Multiple Products OS Command Injection

mailing-list

x_refsource_FULLDISC

vdb-entry

x_refsource_BID

https://www.coresecurity.com/advisories/airlive-multiple-products-os-command-injection

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.