CVE-2013-3686

Name of the Vulnerable Software and Affected Versions AirLive WL2600CAM (affected versions not specified)

Description The issue allows remote attackers to obtain the administrator password. This is achieved through the cgi-bin/operator/param endpoint, specifically by utilizing a list action.

Recommendations For AirLive WL2600CAM, consider restricting access to the cgi-bin/operator/param endpoint until a patch is available. As a temporary workaround, limit the exposure of the device to the internet to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.