CVE:CVE-2010-4231
CNNVD:CNNVD-201011-197
带有固件1.102A-008的Camtron CMNC-200 Full HD IP Camera和TecVoz CMNC-200 Megapixel IP Camera中基于页面的管理界面中存在目录遍历漏洞。远程攻击者可以借助URI中的".."操作符读取任意文件。
solution:Upgrade camtron cmnc-200_firmware to a higher version than 1.102a-008,and avoid the version 1.102a-008; Upgrade camtron cmnc-200 to a higher version than *; Upgrade tecvoz cmnc-200_firmware to a higher version than 1.102a-008,and avoid the version 1.102a-008; Upgrade tecvoz cmnc-200 to a higher version than *