CVE-2015-8287 - OpenCVE

Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch live video by visiting an unspecified URL.

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

AV:N/AC:L/Au:N/C:N/I:N/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Swann	Srnvw-470lcd Firmware Swnvw-470cam Swnvw-470cam Firmware Srnvw-470lcd

Configuration 1 [-]

AND

cpe:2.3:h:swann:swnvw-470cam:-:*:*:*:*:*:*:*

cpe:2.3:h:swann:swnvw-470cam_firmware:*:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:h:swann:srnvw-470lcd:-:*:*:*:*:*:*:*

cpe:2.3:h:swann:srnvw-470lcd_firmware:*:*:*:*:*:*:*:*

References

Link	Resource
http://www.kb.cert.org/vuls/id/923388	Third Party Advisory US Government Resource

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: certcc

Published: 2016-02-18T02:00:00

Updated: 2016-02-18T04:57:02

Reserved: 2015-11-19T00:00:00

Link: CVE-2015-8287

JSON object: View

NVD Information

Status : Analyzed

Published: 2016-02-18T05:59:01.233

Modified: 2016-03-17T21:58:02.067

Link: CVE-2015-8287

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-Other

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:swann:swnvw-470cam:-:*:*:*:*:*:*:*", "matchCriteriaId": "673FC870-54EF-4FE7-A9C9-26E8339CC757", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:swann:swnvw-470cam_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C56687B4-8C89-4084-A784-A042DA80F176", "versionEndIncluding": "1022", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:swann:srnvw-470lcd:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9278A50-22C2-4AB0-8B03-96DDAC10DCF8", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:swann:srnvw-470lcd_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DFEC86F7-5019-4CB1-892F-2DF493668196", "versionEndIncluding": "0114", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch live video by visiting an unspecified URL."}, {"lang": "es", "value": "Dispositivos Swann SRNVW-470LCD con firmware hasta la versi\u00f3n 0114 y dispositivos SWNVW-470CAM con firmware hasta la versi\u00f3n 1022 permiten a atacantes remotos ver v\u00eddeo en vivo visitando una URL no especificada."}], "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/288.html\">CWE-288: Authentication Bypass Using an Alternate Path or Channel</a>", "id": "CVE-2015-8287", "lastModified": "2016-03-17T21:58:02.067", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-02-18T05:59:01.233", "references": [{"source": "cret@cert.org", "tags": ["Third Party Advisory", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/923388"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}