CVE:CVE-2014-1900
CNNVD:CNNVD-201505-208
Y-Cam camera models SD range YCB003等都是英国Y-Cam公司的网络摄像机产品。
多款Y-Cam产品中存在安全漏洞。远程攻击者可通过向en/account/accedit.asp文件发送带有‘/./’字符的请求，利用该漏洞绕过身份验证，获取敏感信息。以下产品受到影响：使用4.30及之前版本固件的Y-Cam camera models SD range YCB003，YCK003，YCW003；S range YCB004，YCK004，YCW004；EyeBall YCEB03；Bullet VGA YCBL03，YCBLB3；Bullet HD 720 YCBLHD5；Y-cam Classic Range YCB002，YCK002，YCW003；Y-cam Original Range YCB001，YCW001。
solution:Upgrade y-cam ycb002_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam ycb004_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam ycw003_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam ycb001_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam ycblhd5_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam ycbl03_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam ycbl03 to a higher version than *; Upgrade y-cam ycblb3_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam ycblb3 to a higher version than *; Upgrade y-cam ycw001_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam yck004_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam yck003_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam ycw004_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam ycw004 to a higher version than *; Upgrade y-cam ycb003_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam yceb03_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam ycw002_firmware to a higher version than 4.30,and avoid the version 4.30; Upgrade y-cam yck002_firmware to a higher version than 4.30,and avoid the version 4.30