diff --git a/db/modules_metadata_base.json b/db/modules_metadata_base.json index acaca27bf5..efa766a701 100644 --- a/db/modules_metadata_base.json +++ b/db/modules_metadata_base.json @@ -15054,6 +15054,53 @@ "notes": { } }, + "auxiliary_gather/ipcamera_password_disclosure": { + "name": "JVC/Siemens/Vanderbilt IP-Camera Readfile Password Disclosure", + "full_name": "auxiliary/gather/ipcamera_password_disclosure", + "rank": 300, + "disclosure_date": "2016-08-16", + "type": "auxiliary", + "author": [ + "Yakir Wizman", + "h00die" + ], + "description": "SIEMENS IP-Camera (CVMS2025-IR + CCMS2025), JVC IP-Camera (VN-T216VPRU),\n and Vanderbilt IP-Camera (CCPW3025-IR + CVMW3025-IR)\n allow an unauthenticated user to disclose the username & password by\n requesting the javascript page 'readfile.cgi?query=ADMINID'.\n Siemens firmwares affected: x.2.2.1798, CxMS2025_V2458_SP1, x.2.2.1798, x.2.2.1235", + "references": [ + "EDB-40254", + "EDB-40263", + "EDB-40264" + ], + "is_server": false, + "is_client": false, + "platform": "", + "arch": "", + "rport": 80, + "autofilter_ports": [ + 80, + 8080, + 443, + 8000, + 8888, + 8880, + 8008, + 3000, + 8443 + ], + "autofilter_services": [ + "http", + "https" + ], + "targets": null, + "mod_time": "2019-02-07 15:14:13 +0000", + "path": "/modules/auxiliary/gather/ipcamera_password_disclosure.rb", + "is_install_path": true, + "ref_name": "gather/ipcamera_password_disclosure", + "check": true, + "post_auth": false, + "default_credential": false, + "notes": { + } + }, "auxiliary_gather/java_rmi_registry": { "name": "Java RMI Registry Interfaces Enumeration", "full_name": "auxiliary/gather/java_rmi_registry",