CVE-2009-1558

Name of the Vulnerable Software and Affected Versions: Cisco Linksys WVC54GCA wireless video camera versions 1.00R22 through 1.00R24

Description: The issue allows remote attackers to read arbitrary files via a %2e (encoded dot dot) or an absolute pathname in the next file parameter of the adm/file.cgi file.

Recommendations: For versions 1.00R22 and 1.00R24, avoid using the next file parameter in the adm/file.cgi file until a fix is available. Restrict access to the adm/file.cgi file to minimize the risk of exploitation.