CVE-2010-4232

The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // (slash slash) at the beginning of a URI, as demonstrated by the //system.html URI.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

4.26% chance of exploitation in the next 30 days, 90th percentile

Published

2010-11-16

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15506

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15506

References

• CVE Record
• NVD entry

Related

• CVE-2010-4231
• CVE-2010-4233
• CVE-2010-4230
• CVE-2010-4234
• CVE-2010-4228
• CVE-2010-4236