« Volver al listado

CVE-2013-3689

Estado: ModificadaAlta (7.8)—

Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which allow remote attackers to obtain sensitive information (user names, passwords, and configurations) via a get action.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

Brickcom — 100ap Device FirmwareBrickcom — Fb-100apBrickcom — Md-100apBrickcom — Ob-100aeBrickcom — Osd-040eBrickcom — Wcb-100apBrickcom — Wfb-100ap

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3689",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-10-04T23:55:03.970",
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2013/Jun/84",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2013/Jun/84",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which allow remote attackers to obtain sensitive information (user names, passwords, and configurations) via a get action."
    },
    {
      "lang": "es",
      "value": "Brickcom FB-100AP, WCB-100AP, MD-100AP, WFB-100AP,  OB-100Ae, OSD-040E, y posiblemente otros modelos de cámaras con firmware 3.0.6.16C1 y anteriores, no limitan adecuadamente el acceso a configfile.dump, que permite a atacantes remotos obtener información sensible (nombres de usuario, contraseñas y configuraciones) a través de una acción get."
    }
  ],
  "lastModified": "2026-06-16T23:55:38.293",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:brickcom:100ap_device_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B92EEBC-BD88-4F6F-A0F5-9B90F0E80F9C",
              "versionEndIncluding": "3.0.6.16c1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:brickcom:fb-100ap:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8793329F-0144-40FB-A2C5-AC5F8E3A2DAF"
            },
            {
              "criteria": "cpe:2.3:h:brickcom:md-100ap:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7272E6B1-E94B-463E-843B-DCD5448718B5"
            },
            {
              "criteria": "cpe:2.3:h:brickcom:ob-100ae:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8DC5FA0-0BD5-41A3-8924-AC775728A763"
            },
            {
              "criteria": "cpe:2.3:h:brickcom:osd-040e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BDD54A2-36B9-4A17-8C2D-A0CCB9CD5379"
            },
            {
              "criteria": "cpe:2.3:h:brickcom:wcb-100ap:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A2CF165-23AA-4C7D-9D8F-3A225CAB3193"
            },
            {
              "criteria": "cpe:2.3:h:brickcom:wfb-100ap:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9DD4683-503D-4F23-A9D3-531A04207E37"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}