CVE-2014-8389 - CVE House
Back to Database
Status published Critical CVE-2014-8389

cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026...

Vulnerability Description

cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-coded credentials in the embedded Boa web server, which allows remote attackers to obtain user credentials via crafted HTTP requests.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-8389

Credits & Attribution

No credits recorded in the NVD database.

References

More from airlive

View All →
CVE-2015-2279
cgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware...
Critical 9.8

Affected Vendor

Affected Software

bu-3026 firmware, md-3025 firmware, wl-2000cam firmware, poe-200cam v2 firmware, bu-2015 firmware
Vulnerable Versions:
1.43_21.08.2014, 1.81_21.08.2014, lm.1.6.18_14.10.2011, lm.1.6.17.01, 1.03.18_16.06.2014

Timeline

Official Publish: December 27th, 2017
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.