NVD

Id
30408  
Name
CVE-2014-1849  
Description
Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by modifying arbitrary camera records in the Foscam DNS server.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-05-13  
Modified Date
2014-05-14  
Seq
2014-1849  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160875 30408 CVE-2014-1849 http://blog.shekyan.com/2014/05/cve-2014-1849-foscam-dynamic-dns-predictable-credentials-vulnerability.html  View
160876 30408 CVE-2014-1849 20140508 CVE-2014-1849 Foscam Dynamic DNS predictable credentials vulnerability  View
160877 30408 CVE-2014-1849 https://github.com/artemharutyunyan/getmecamtool/blob/master/src/dnsmod.c  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13620 JVNDB-2014-002495 Foscam IP camera における任意のカメラを偽装またはハイジャックされる脆弱性 Foscam IP camera は、Foscam DynDNS オプションを使用する際、予測可能なカメラのサブドメイン名に基づいた認証情報を生成するため、任意のカメラを偽装またはハイジャックされる、およびその他の攻撃を実行される脆弱性が存在します。 CVE-2014-1849 69136 CVE-2014-1849 30408 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002495.html 2014-05-08 2014-05-16 View