Vulnerability Details CVE-2015-2280
snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.296
EPSS Ranking 96.4%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
- http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html
- http://seclists.org/fulldisclosure/2015/Jul/40
- http://www.securityfocus.com/archive/1/535963/100/0/threaded
- http://www.securityfocus.com/bid/75597
- https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection
- https://www.exploit-db.com/exploits/37527/
- http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html
- http://seclists.org/fulldisclosure/2015/Jul/40
- http://www.securityfocus.com/archive/1/535963/100/0/threaded
- http://www.securityfocus.com/bid/75597
- https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection
- https://www.exploit-db.com/exploits/37527/
Products affected by CVE-2015-2280
-
cpe:2.3:h:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp:-
-
cpe:2.3:o:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp_firmware:1.1.0-12_20120709