CVE-2008-4390

The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network.

• CWE-319

• http://secunia.com/advisories/33032Broken Link
• http://www.kb.cert.org/vuls/id/528993Patch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/MAPG-7HJKSAThird Party Advisory, US Government Resource
• http://www.linksys.com/servlet/Satellite?blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=text%2Fplain&blobheadervalue2=inline%3B+filename%3DWVC54GC-V1.0_non-RoHS-v1.25_fw_ver.txt&blobkey=id&blobtable=MungoBlobs&blobwhere=1193776031728&ssbinary=true&lid=8104724130B17Product
• http://www.securityfocus.com/bid/32666Broken Link, Third Party Advisory, VDB Entry
• http://secunia.com/advisories/33032Broken Link
• http://www.kb.cert.org/vuls/id/528993Patch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/MAPG-7HJKSAThird Party Advisory, US Government Resource
• http://www.linksys.com/servlet/Satellite?blobcol=urldata&blobheadername1=Content-Type&blobheadername2=Content-Disposition&blobheadervalue1=text%2Fplain&blobheadervalue2=inline%3B+filename%3DWVC54GC-V1.0_non-RoHS-v1.25_fw_ver.txt&blobkey=id&blobtable=MungoBlobs&blobwhere=1193776031728&ssbinary=true&lid=8104724130B17Product
• http://www.securityfocus.com/bid/32666Broken Link, Third Party Advisory, VDB Entry

Published

Dec 9, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4383Stack-based buffer overflow in the Agranet-Emweb embedded ma…
• CVE-2008-4384Multiple stack-based buffer overflows in MGI Software LPView…
• CVE-2008-4385Husdawg, LLC Systems Requirements Lab 3, as used by Instant …
• CVE-2008-4387Unspecified vulnerability in the Simba MDrmSap ActiveX contr…
• CVE-2008-4388The LaunchObj ActiveX control before 5.2.2.865 in launcher.d…
• CVE-2008-4389Symantec AppStream 5.2.x and Symantec Workspace Streaming (S…
• CVE-2008-4391Stack-based buffer overflow in the SetSource method in the N…
• CVE-2008-4392dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent…
• CVE-2008-4393Cross-site scripting (XSS) vulnerability in VeriSign Kontiki…
• CVE-2008-4394Multiple untrusted search path vulnerabilities in Portage be…
• CVE-2008-4395Multiple buffer overflows in the ndiswrapper module 1.53 for…
• CVE-2008-4396Stack-based buffer overflow in Safer Networking FileAlyzer 1…