What’s Vulnerable › Vulnerabilities

CVE-2019-7315

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 11.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-06-17 · updated 2026-06-17
• Weakness: CWE-22

Description

Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow. NOTE: this product is discontinued, and its final firmware version has this vulnerability (4.x versions exist only for other Genie Access products).

Affected products

• Genieaccess Wip3Bvaf Firmware: through 3.0

References

• https://labs.nettitude.com/blog/cve-2019-7315-genie-access-wip3bvaf-ip-camera-directory-traversal/
• https://labs.nettitude.com/blog/cve-2019-7315-genie-access-wip3bvaf-ip-camera-directory-traversal/

Get alerted when CVE-2019-7315 or the next vulnerability affects your stack