CVE

Id
69196  
CVE No.
CVE-2014-1901  
Status
Candidate  
Description
Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5; Y-cam Classic Range YCB002, YCK002, and YCW003; and Y-cam Original Range YCB001, YCW001, running firmware 4.30 and earlier, allow remote authenticated users to cause a denial of service (reboot) via a malformed (1) path parameter to en/store_main.asp, (2) item parameter to en/account/accedit.asp, or (3) emailid parameter to en/smtpclient.asp. NOTE: this issue can be exploited without authentication by leveraging CVE-2014-1900.  
Phase
Assigned (20140207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
664715 69196 CVE-2014-1901 MISC:https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2014-007/?fid=3850  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13628 JVNDB-2014-002503 Android SDK Platform-tools の Android 用 Android Debug Bridge における整数符号エラーの脆弱性 Android SDK Platform-tools の Android 4.4 用 Android Debug Bridge (ADB) の system/core/adb/adb_client.c には、整数符号エラーの脆弱性が存在します。 CVE-2014-1909 69196 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002503.html  View