CVE-2013-3689
Last modified
CVE-2013-3689 is a vulnerability of currently unknown severity. Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which allow remote attackers to obtain sensitive information (user names, passwords, and configurations) via a get action.. EPSS estimates a 1.48% chance of exploitation in the next 30 days.
Description
Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.0.6.16C1 and earlier, do not properly restrict access to configfile.dump, which allow remote attackers to obtain sensitive information (user names, passwords, and configurations) via a get action.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Brickcom | 100ap Device Firmware | <= 3.0.6.16c1 |
| Brickcom | Fb-100ap | All versions |
| Brickcom | Md-100ap | All versions |
| Brickcom | Ob-100ae | All versions |
| Brickcom | Osd-040e | All versions |
| Brickcom | Wcb-100ap | All versions |
| Brickcom | Wfb-100ap | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-3689?
How severe is CVE-2013-3689?
How do I fix CVE-2013-3689?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-3678Multiple unspecified vulnerabilities in SAP Governance, Risk…
- CVE-2013-3684NextGEN Gallery plugin before 1.9.13 for WordPress: ngggalle…9.8
- CVE-2013-3685A Privilege Escalation Vulnerability exists in Sprite Softwa…7
- CVE-2013-3686cgi-bin/operator/param in AirLive WL2600CAM and possibly oth…
- CVE-2013-3687AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, …
- CVE-2013-3688The TP-Link IP Cameras TL-SC3171, TL-SC3130, TL-SC3130G, TL-…
- CVE-2013-3690Cross-site request forgery (CSRF) vulnerability in cgi-bin/u…
- CVE-2013-3691AirLive POE-2600HD allows remote attackers to cause a denial…7.5
- CVE-2013-3692BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartp…
- CVE-2013-3693The BlackBerry Universal Device Service in BlackBerry Enterp…
- CVE-2013-3694BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 …
- CVE-2013-3697Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in N…
Are you affected by CVE-2013-3689?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST