vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2014-8389

N/A
Published: December 27, 2017 at 06:00 PM UTC
Updated: June 17, 2026 at 12:16 AM UTC
10 products affected across 1 vendorBu 3026 FirmwareMd 3025 FirmwareBu 2015 Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 51%

Description

cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-coded credentials in the embedded Boa web server, which allows remote attackers to obtain user credentials via crafted HTTP requests.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Bu 2015 Firmware· Airlive
95%
1.03.18_16.06.2014
airlive-bu-2015 (same device)
Bu 3026 Firmware· Airlive
95%
1.43_21.08.2014
airlive-bu-3026 (same device)
Md 3025 Firmware· Airlive
95%
1.81_21.08.2014
airlive-md-3025 (same device)
POE 200CAM V2 Firmware· Airlive
95%
lm.1.6.17.01
airlive-poe-200cam-v2 (same device)
Wl 2000CAM Firmware· Airlive
95%
lm.1.6.18_14.10.2011
airlive-wl-2000cam (same device)
Bu-2015· Airlivedevice
80%
All versions
Bu-3026· Airlivedevice
80%
All versions
Md-3025· Airlivedevice
80%
All versions
Poe-200Cam V2· Airlivedevice
80%
All versions
Wl-2000Cam· Airlivedevice
80%
All versions

References (5)

x_refsource_MISCExploitMitigationThird Party AdvisoryVDB Entry
Source: [email protected]
http://packetstormsecurity.com/files/132585/AirLive-Remote-Command-Injection.html
Mailing Listx_refsource_FULLDISCExploitMitigationThird Party Advisory
Source: [email protected]
http://seclists.org/fulldisclosure/2015/Jul/29
Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/535938/100/0/threaded
VDB Entryx_refsource_BIDExploitMitigationThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/75559
x_refsource_MISCExploitMitigationTechnical DescriptionThird Party Advisory
Source: [email protected]
https://www.coresecurity.com/advisories/airlive-multiple-products-os-command-injection

CVSS

10HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-78

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card