CVE-2010-4231
NUCLEICamtron and TecVoz CMNC-200 Firmware 1.102A-008 - Path Traversal via URI
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-4231. PoCs published by Trustwave's SpiderLabs, K3ysTr0K3R. A Nuclei detection template is also available.
AI-analyzed exploit summary This writeup describes a directory traversal vulnerability in the CMNC-200 IP Camera's web server, allowing unauthenticated access to sensitive files like /etc/passwd and /etc/shadow. The exploit is trivial, requiring only a crafted HTTP GET request.
Description
Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
Exploits (2)
This writeup describes a directory traversal vulnerability in the CMNC-200 IP Camera's web server, allowing unauthenticated access to sensitive files like /etc/passwd and /etc/shadow. The exploit is trivial, requiring only a crafted HTTP GET request.
The repository contains a functional bash script that exploits a directory traversal vulnerability (CVE-2010-4231) in Camtron and TecVoz IP cameras. The script attempts to read sensitive files like /etc/passwd and /etc/shadow by sending crafted HTTP requests with directory traversal sequences.