CVE-2012-3002

Foscam/Wansview IP Cameras - Auth Bypass

Title source: llm

Description

The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL.

References (6)

[Various Sources] http://foscam.us/forum/h264-ip-camera-web-interface-authentication-bypass-test-tool-t3252.html

[Various Sources] http://www.foscam.com/help.aspx?TypeId=11

[US Government Resource] http://www.kb.cert.org/vuls/id/265532

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/55873

[Third Party Advisory] http://secunia.com/advisories/50950

[Third Party Advisory] http://secunia.com/advisories/50966

Scores

EPSS 0.0162

EPSS Percentile 81.6%

Classification

CWE

CWE-287

Status draft

Affected Products (2)

foscam/h.264_hi3510\/11\/12_ip_camera

wansview/h.264_hi3510\/11\/12_ip_camera

Timeline

Published Dec 21, 2012

Tracked Since Feb 18, 2026