CVE-2009-1560 Information disclosure in n/a

High 7.8 Published Updated

Remote attackers can read HTML source code to obtain cleartext passwords and wireless keys from the Cisco Linksys WVC54GCA camera.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2009-1560?

CVE-2009-1560 is a high-severity vulnerability in n/a, published on 6 May 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 stores passwords and wireless-network keys in cleartext in (1) pass_wd.htm and (2) Wsecurity.htm, which allows remote attackers to obtain sensitive information by reading the HTML source code.

Weakness: CWE-310

Which versions are affected by CVE-2009-1560?

It affects 1 product.

Products include Cisco Wvc54gc.

How do I fix CVE-2009-1560?

No fix has been published for CVE-2009-1560 yet. Limit exposure of the affected software until one is available.

Is CVE-2009-1560 being exploited?

There is no known exploitation of CVE-2009-1560 in the wild and no public exploit code.

Sources

Also known as GHSA-q8v9-gg98-chwq.

Is CVE-2009-1560 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free