MEDIUM · 6.4

CVE-2014-3895

The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM camera with firmware 1.08 and earlier, TS-PTCAM camera with firmware 1.08 and e...

Vulnerability Description

The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM camera with firmware 1.08 and earlier, TS-PTCAM camera with firmware 1.08 and earlier, TS-PTCAM/POE camera with firmware 1.08 and earlier, and TS-WLC2 camera with firmware 1.02 and earlier allow remote attackers to bypass authentication, and consequently obtain sensitive credential and configuration data, via unspecified vectors.

CVSS Score

6.4

MEDIUM

AV:N/AC:L/Au:N/C:P/I:P/A:N
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
IodataTs-Wlcam\/V Camera Firmware<= 1.0.6
IodataTs-Wlcam\/V Camera-
IodataTs-Wptcam Camera Firmware<= 1.0.8
IodataTs-Wptcam Camera-
IodataTs-Wlcam Camera Firmware<= 1.06
IodataTs-Wlcam Camera-
IodataTs-Ptcam\/Poe Camera Firmware<= 1.08
IodataTs-Ptcam\/Poe Camera-
IodataTs-Wlc2 Camera Firmware<= 1.02
IodataTs-Wlc2 Camera-
IodataTs-Ptcam Camera Firmware<= 1.08
IodataTs-Ptcam Camera-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2014-3895?

CVE-2014-3895 is a vulnerability with a CVSS score of 6.4 (MEDIUM). The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM camera with firmware 1.08 and earlier, TS-PTCAM camera with firmware 1.08 and e...

How severe is CVE-2014-3895?

CVE-2014-3895 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-3895?

Check the references section above for vendor advisories and patch information. Affected products include: Iodata Ts-Wlcam\/V Camera Firmware, Iodata Ts-Wlcam\/V Camera, Iodata Ts-Wptcam Camera Firmware, Iodata Ts-Wptcam Camera, Iodata Ts-Wlcam Camera Firmware.