CVE-2014-8389 in BU-2015信息

摘要

由 VulDB • 2026-07-21

AirLive BU-2015 (firmware 1.03.18 16.06.2014), AirLive BU-3026 (firmware 1.43 21.08.2014), AirLive MD-3025 (firmware 1.81 21.08.2014), AirLive WL-2000CAM (firmware LM.1.6.18 14.10.2011) e AirLive POE-200CAM v2 (firmware LM.1.6.17.01) presentano nel file cgi-bin/mft/wireless_mft.cgi l'uso di credenziali hard-coded nel server web embedded Boa, il che consente ad attaccanti remoti di ottenere le credenziali degli utenti tramite richieste HTTP appositamente create (crafted).

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2014-10-22

披露

2017-12-27

管理

已接受

条目

VDB-111027

CPE

准备好

CWE

CWE-78 (已确认)

利用

下载

CVSS

9.8 (NVD)

EPSS

0.50772

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2014-8389
NVD	https://nvd.nist.gov/vuln/detail/CVE-2014-8389
CVE Details	https://www.cvedetails.com/cve/CVE-2014-8389/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!