CVE-2010-4231

Name of the Vulnerable Software and Affected Versions Camtron CMNC-200 Full HD IP Camera version 1.102A-008 TecVoz CMNC-200 Megapixel IP Camera version 1.102A-008

Description The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, due to a directory traversal vulnerability in the web-based administration interface.

Recommendations For Camtron CMNC-200 Full HD IP Camera version 1.102A-008, consider restricting access to the web-based administration interface until a patch is available. For TecVoz CMNC-200 Megapixel IP Camera version 1.102A-008, consider restricting access to the web-based administration interface until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.