CVE-2014-1901

Published: May 14, 2015Modified: May 6, 2026

6.8

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Exploitability: 8.0 / Impact: 6.9

Source: NVD

Description

Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote authenticated users to cause a denial of service (reboot) via a malformed (1) path parameter to en/store_main.asp, (2) item parameter to en/account/accedit.asp, or (3) emailid parameter to en/smtpclient.asp. NOTE: this issue can be exploited without authentication by leveraging CVE-2014-1900.

Affected (18)

Products: Y Cam: Yceb03 Firmware, Ycb004 Firmware, Ycb002 Firmware, Ycbl03 Firmware, Ycbl03, Ycblb3 Firmware, Ycblb3, Yck002 Firmware, Ycblhd5 Firmware, Ycw003 Firmware, Ycw001 Firmware, Ycw002 Firmware, Ycb001 Firmware, Ycw004 Firmware, Ycw004, Yck003 Firmware, Yck004 Firmware, Ycb003 Firmware

18 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Yceb03 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Yceb03	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Ycb004 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Ycb004	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Ycb002 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Ycb002	All versions

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Y Cam Ycbl03 Firmware	Version 4.30
Y Cam Ycbl03	All versions

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Y Cam Ycblb3 Firmware	Version 4.30
Y Cam Ycblb3	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Yck002 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Yck002	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Ycblhd5 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Ycblhd5	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Ycw003 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Ycw003	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Ycw001 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Ycw001	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Ycw002 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Ycw002	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Ycb001 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Ycb001	All versions

Configuration L

2 vulnerable

Vulnerable Software	Affected Versions
Y Cam Ycw004 Firmware	Version 4.30
Y Cam Ycw004	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Yck003 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Yck003	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Yck004 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Yck004	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Y Cam Ycb003 Firmware	Version 4.30

Running on/with	Platform Versions
Y Cam Ycb003	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.y-cam.com/y-cam-security-fix/

Source: cve@mitre.org

https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-007/?fid=3850

Source: cve@mitre.org

http://www.y-cam.com/y-cam-security-fix/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-007/?fid=3850

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.