CVE-2014-8389
- State
- Published
- Severity
- Not scored
- Published
- Dec 27, 2017
- Updated
- Aug 6, 2024
- Reserved
- Oct 22, 2014
Description
cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-coded credentials in the embedded Boa web server, which allows remote attackers to obtain user credentials via crafted HTTP requests.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20150706 [CORE-2015-0012] - AirLive Multiple Products OS Command Injectionmailing-list
- http://packetstormsecurity.com/files/132585/AirLive-Remote-Command-Injection.html
- 20151231 [CORE-2015-0012] - AirLive Multiple Products OS Command Injectionmailing-list
- 75559vdb-entry
- https://www.coresecurity.com/advisories/airlive-multiple-products-os-command-injection
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.