CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Permissions Privileges and Access Controls
Summary: the cisco rvs4000 4-port gigabit security router before 1.3.2.0, pvc2300 business internet video camera before 1.1.2.6, wvc200 wireless-g ptz internet video camera before 1.1.1.15, wvc210 wireless-g ptz internet video camera before 1.1.1.15, and wvc2300 wireless-g business internet video camera before 1.1.2.6 do not properly restrict read access to passwords, which allows context-dependent attackers to obtain sensitive information, related to (1) access by remote authenticated users to a pvc2300 or wvc2300 via a crafted url, (2) leveraging setup privileges on a wvc200 or wvc210, and (3) leveraging administrative privileges on an rvs4000, aka bug id cscte64726.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2010-04-22
Last Modified Date: 2017-08-17