ID de Prueba:	1.3.6.1.4.1.25623.1.0.803774
Categoría:	Web application abuses
Título:	MayGion IP Cameras Multiple Vulnerabilities
Resumen:	MayGion IP Camera is prone to multiple vulnerabilities.
Descripción:	Summary: MayGion IP Camera is prone to multiple vulnerabilities. Vulnerability Insight: - The flaw is due to the program not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../). - User-supplied input is not properly validated when handling a specially crafted GET request. This may allow a remote attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. Vulnerability Impact: Successful exploitation will allow remote attackers to gain access to information or cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. Affected Software/OS: MayGion IP cameras firmware version 2011.27.09 Solution: Upgrade to H.264 ipcam firmware 2013.04.22 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1604 BugTraq ID: 60192 http://www.securityfocus.com/bid/60192 http://www.exploit-db.com/exploits/25813 http://seclists.org/fulldisclosure/2013/May/194 http://www.coresecurity.com/advisories/maygion-IP-cameras-multiple-vulnerabilities XForce ISS Database: maygion-ipcamera-cve20131604-dir-traversal(84589) https://exchange.xforce.ibmcloud.com/vulnerabilities/84589 Common Vulnerability Exposure (CVE) ID: CVE-2013-1605 BugTraq ID: 60196 http://www.securityfocus.com/bid/60196 http://packetstormsecurity.com/files/121787/MayGion-IP-Camera-Path-Traversal-Buffer-Overflow.html http://osvdb.org/93708 XForce ISS Database: maygion-ipcamera-cve20131605-bo(84590) https://exchange.xforce.ibmcloud.com/vulnerabilities/84590
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.