What is CVE-2013-2560?

CVE-2013-2560 is a vulnerability in Foscam Fi8919w, classified under Path Traversal. Published 2013-03-15.

Is CVE-2013-2560 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Foscam Fi8919w

CVE-2013-2560

Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI, as demonstrated by discovering (1) web credentials or (2) Wi-Fi credentials.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.093 (94.8th percentile) — read the EPSS interpretation.

Affected products

Foscam Fi8919w
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

Public proof-of-concept exploits

on4r4p/foscamPoc

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2013-2560?: CVE-2013-2560 is a vulnerability in Foscam Fi8919w, classified under Path Traversal. Published 2013-03-15.
Is CVE-2013-2560 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.