CVE-2013-3686

Ovislink Airlive Wl2600cam - Access Control

Title source: rule

Description

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.

Exploits (1)

exploitdb WRITEUP

webappshardware

https://www.exploit-db.com/exploits/26174

View Code ZIP pw:eip

References (1)

[Exploit] http://seclists.org/fulldisclosure/2013/Jun/84

Scores

EPSS 0.3957

EPSS Percentile 97.3%

Details

CWE

CWE-264

Status published

Products (1)

ovislink/airlive_wl2600cam

Published Oct 11, 2013

Tracked Since Feb 18, 2026