CVE-2013-3541

Name of the Vulnerable Software and Affected Versions AirLive WL2600CAM (affected versions not specified)

Description A directory traversal issue exists in the cgi-bin/admin/fileread endpoint, allowing remote attackers to read arbitrary files by including a .. (dot dot) in the READ.filePath parameter.

Recommendations For AirLive WL2600CAM, restrict access to the cgi-bin/admin/fileread endpoint until a fix is available. As a temporary workaround, consider disabling the use of the READ.filePath parameter in the affected endpoint to minimize the risk of exploitation.