← Back

CVE-2014-1900

nvd nist
Published: May 14, 2015Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote attackers to bypass authentication and obtain sensitive information via a leading "/./" in a request to en/account/accedit.asp.

Affected (18)

Y Cam
18 products
Ycb002 Firmware
Ycb004 Firmware
Ycw003 Firmware
Ycb001 Firmware
Ycblhd5 Firmware
Ycbl03 Firmware
Ycbl03
Ycblb3 Firmware
Ycblb3
Ycw001 Firmware
Yck004 Firmware
Yck003 Firmware
Ycw004 Firmware
Ycw004
Ycb003 Firmware
Yceb03 Firmware
Ycw002 Firmware
Yck002 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ycb002 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Ycb002
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ycb004 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Ycb004
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ycw003 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Ycw003
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ycb001 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Ycb001
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ycblhd5 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Ycblhd5
All versions
Configuration F
2 vulnerable
Vulnerable SoftwareAffected Versions
Ycbl03 Firmware
Version 4.30
Ycbl03
All versions
Configuration G
2 vulnerable
Vulnerable SoftwareAffected Versions
Ycblb3 Firmware
Version 4.30
Ycblb3
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ycw001 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Ycw001
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Yck004 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Yck004
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Yck003 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Yck003
All versions
Configuration K
2 vulnerable
Vulnerable SoftwareAffected Versions
Ycw004 Firmware
Version 4.30
Ycw004
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ycb003 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Ycb003
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Yceb03 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Yceb03
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ycw002 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Ycw002
All versions
Configuration O
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Yck002 Firmware
Version 4.30
Running on/withPlatform Versions
Y Cam
Yck002
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit

Timeline

No history available yet.