CVE-2010-4232
Camtron CMNC-200 Firmware 1.102A-008 - Unauthenticated Authentication Bypass via Double Slash URI
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-4232. PoCs published by Trustwave's SpiderLabs.
AI-analyzed exploit summary The exploit describes an authentication bypass vulnerability in the CMNC-200 IP Camera's web interface. By adding an extra forward slash after the hostname, an attacker can bypass authentication and gain full control of the device.
Description
The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // (slash slash) at the beginning of a URI, as demonstrated by the //system.html URI.
Exploits (1)
The exploit describes an authentication bypass vulnerability in the CMNC-200 IP Camera's web interface. By adding an extra forward slash after the hostname, an attacker can bypass authentication and gain full control of the device.