HIGH · 10.0

CVE-2013-3686

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.

Vulnerability Description

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
OvislinkAirlive Wl2600Cam-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2013-3686?

CVE-2013-3686 is a vulnerability with a CVSS score of 10.0 (HIGH). cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action.

How severe is CVE-2013-3686?

CVE-2013-3686 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-3686?

Check the references section above for vendor advisories and patch information. Affected products include: Ovislink Airlive Wl2600Cam.