CVE-2010-0593
First published: Thu Apr 22 2010(Updated: )
The Cisco RVS4000 4-port Gigabit Security Router before 1.3.2.0, PVC2300 Business Internet Video Camera before 1.1.2.6, WVC200 Wireless-G PTZ Internet Video Camera before 1.1.1.15, WVC210 Wireless-G PTZ Internet Video Camera before 1.1.1.15, and WVC2300 Wireless-G Business Internet Video Camera before 1.1.2.6 do not properly restrict read access to passwords, which allows context-dependent attackers to obtain sensitive information, related to (1) access by remote authenticated users to a PVC2300 or WVC2300 via a crafted URL, (2) leveraging setup privileges on a WVC200 or WVC210, and (3) leveraging administrative privileges on an RVS4000, aka Bug ID CSCte64726.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Pvc2300 | <=1.1.1.4 | |
| Cisco Wvc200 | <=1.1.0.15 | |
| Cisco Wvc200 | =1.1.0.12 | |
| Cisco Wvc210 | <=1.1.0.15 | |
| Cisco Wvc210 | =1.1.0.12 | |
| Cisco Wvc2300 | <=1.1.1.4 | |
| Cisco RVS4000 | =1.3.0.5 | |
| Cisco RVS4000 | <=1.3.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b27511.shtml
- http://www.securityfocus.com/bid/39612
- http://osvdb.org/63978
- http://secunia.com/advisories/39510
- http://www.vupen.com/english/advisories/2010/0965
- http://www.securitytracker.com/id?1023906
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58034
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/first-publish-date
- agent/softwarecombine
- agent/remedy
- agent/last-modified-date
- agent/type
- agent/description
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco pvc2300
- version/cisco pvc2300/1.1.1.4
- canonical/cisco wvc200
- version/cisco wvc200/1.1.0.15
- version/cisco wvc200/1.1.0.12
- canonical/cisco wvc210
- version/cisco wvc210/1.1.0.15
- version/cisco wvc210/1.1.0.12
- canonical/cisco wvc2300
- version/cisco wvc2300/1.1.1.4
- canonical/cisco rvs4000
- version/cisco rvs4000/1.3.0.5
- version/cisco rvs4000/1.3.1.0