File Reading Vulnerability in Cisco Linksys Wireless Video Camera

CVE-2009-1556

Summary

The Cisco Linksys WVC54GCA wireless video camera allows remote authenticated users to exploit a vulnerability in the img/main.cgi script. By manipulating the next_file parameter, attackers can read arbitrary files from the camera's filesystem, potentially exposing sensitive information such as the admin password stored in the .htpasswd file. This flaw highlights the importance of securing device access and minimizing the attack surface by restricting file access capabilities.

References