CVE-2013-3541

Ovislink Airlive Wl2600cam - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in cgi-bin/admin/fileread in AirLive WL2600CAM and possibly other camera models allows remote attackers to read arbitrary files via a .. (dot dot) in the READ.filePath parameter.

Exploits (1)

exploitdb WORKING POC

webappshardware

https://www.exploit-db.com/exploits/26174

View Code ZIP pw:eip

References (1)

[Exploit] http://seclists.org/fulldisclosure/2013/Jun/84

Scores

EPSS 0.1298

EPSS Percentile 94.1%

Details

CWE

CWE-22

Status published

Products (1)

ovislink/airlive_wl2600cam

Published Oct 04, 2013

Tracked Since Feb 18, 2026