« Volver al listado

CVE-2012-3002

Estado: ModificadaAlta (10)—

The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Foscam — H.264 Hi3510/11/12 IP CameraWansview — H.264 Hi3510/11/12 IP Camera

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-3002",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-12-21T11:47:36.363",
  "references": [
    {
      "url": "http://foscam.us/forum/h264-ip-camera-web-interface-authentication-bypass-test-tool-t3252.html",
      "source": "cret@cert.org"
    },
    {
      "url": "http://secunia.com/advisories/50950",
      "source": "cret@cert.org"
    },
    {
      "url": "http://secunia.com/advisories/50966",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.foscam.com/help.aspx?TypeId=11",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/265532",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/55873",
      "source": "cret@cert.org"
    },
    {
      "url": "http://foscam.us/forum/h264-ip-camera-web-interface-authentication-bypass-test-tool-t3252.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/50950",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/50966",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.foscam.com/help.aspx?TypeId=11",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/265532",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/55873",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative functions or read the admin password, via a direct request to an unspecified URL."
    },
    {
      "lang": "es",
      "value": "La interfaz web en las cámaras IP (1) Foscam y (2) Wansview  permite eludir la autenticación a los atacantes, así como realizar funciones administrativas o leer la contraseña de administrador, a través de una solicitud directa a una URL no especificada.\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:42:29.740",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:foscam:h.264_hi3510\\/11\\/12_ip_camera:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "872455E4-7F9F-4692-83CC-AFA334DE8877"
            },
            {
              "criteria": "cpe:2.3:h:wansview:h.264_hi3510\\/11\\/12_ip_camera:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C2813BE-C0F3-403E-8DA6-BA53744FECBF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}