CVE-2009-1555

Name of the Vulnerable Software and Affected Versions: Cisco Linksys WVC54GCA wireless video camera version 1.00R22 Cisco Linksys WVC54GCA wireless video camera version 1.00R24

Description: The issue allows remote attackers to obtain sensitive information, such as passwords, by reading the process memory of the SetupWizard.exe. This is related to the way the camera sends configuration data in response to a remote-management command from the Setup Wizard.

Recommendations: For version 1.00R22, update the firmware to a version that addresses this issue. For version 1.00R24, update the firmware to a version that addresses this issue. As a temporary workaround, consider restricting access to the Setup Wizard remote-management command until a patch is available.