CVE-2013-1604

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-03-25 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to read arbitrary files via a .. (dot dot) in the default URI.

Affected products

Maygion Ip Camera Firmware: through 09.27; 05.49, 05.53, 05.59, 05.60, 6.0, 6.1 (+1)

References

http://seclists.org/fulldisclosure/2013/May/194
http://www.coresecurity.com/advisories/maygion-IP-cameras-multiple-vulnerabilities
http://www.exploit-db.com/exploits/25813
http://www.securityfocus.com/bid/60192
https://exchange.xforce.ibmcloud.com/vulnerabilities/84589
http://seclists.org/fulldisclosure/2013/May/194
http://www.coresecurity.com/advisories/maygion-IP-cameras-multiple-vulnerabilities
http://www.exploit-db.com/exploits/25813
http://www.securityfocus.com/bid/60192
https://exchange.xforce.ibmcloud.com/vulnerabilities/84589

Get alerted when CVE-2013-1604 or the next vulnerability affects your stack