Vulnerability-Lookup

CVE-2015-2280 (GCVE-0-2015-2280)

Vulnerability from cvelistv5 – Published: 2017-07-24 15:00 – Updated: 2024-08-06 05:10

Shadowserver Previdian

Summary

Severity

8.8 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://www.coresecurity.com/advisories/airlink10…	x_refsource_MISC
http://www.securityfocus.com/archive/1/535963/100…	mailing-listx_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2015/Jul/40	mailing-listx_refsource_FULLDISC
https://www.exploit-db.com/exploits/37527/	exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/75597	vdb-entryx_refsource_BID
http://packetstormsecurity.com/files/132609/AirLi…	x_refsource_MISC

Date Public

2015-07-08 00:00

Shadowserver

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: 4593abba-297e-4214-be40-2fbcf3a13db6

Vulnerability ID: CVE-2015-2280

Status: Confirmed

Status Updated: 2025-10-19 06:17 UTC

Exploited: Yes

Characteristics

Severity: 88.0

Timestamps

First Seen: 2025-10-19

Asserted: 2025-10-19

Last Seen: 2025-10-19

Scope

Asset Exposure: ['internet-facing']

Evidence

Type: Honeypot

Signal: In The Wild Attempts

Confidence: 70%

Source: shadowserver

Details

1D	1
Iot	yes
Feed	Shadowserver Foundation honeypot/exploited-vulnerabilities
Type	http-scan
Class	video-system
7D Avg	0
Vendor	AirLink101
30D Avg	0
90D Avg	0
Product	AirLink101 SkyIPCam1620W
Cisa Kev	no
Connections	253
Observation Date	2025-10-19
Vulnerability Class	CVSS
Vulnerability Score	8.8
Vulnerability Severity	High

References

Created: 2026-06-30 10:22 UTC | Updated: 2026-06-30 10:22 UTC

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: e9a81516-3379-42b4-972a-b7bb347b893e

Vulnerability ID: CVE-2015-2280

Status: Confirmed

Status Updated: 2017-07-24 15:00 UTC

Exploited: Yes

Timestamps

First Seen: 2017-07-24

Asserted: 2017-07-24

Scope

Notes: KEVIntel entry: snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote... | Affected: n/a / n/a | Used in malware: unknown | Not yet in CISA KEV: True

Evidence

Type: Public Report

Signal: Successful Exploitation

Confidence: 70%

Source: kevintel

Details

Feed	KEVIntel (kevintel.com)
Title	snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote...
Vendor	n/a
Product	n/a
Added Date	2017-07-24T15:00:00.000Z
Cvss Score	None
Epss Score	None
Cvss Severity	None
Epss Percentile	None
Used In Malware	unknown
Ahead Of Cisa Kev	None
Not Yet In Cisa Kev	True

References

Created: 2026-06-23 14:06 UTC | Updated: 2026-07-10 06:14 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T05:10:15.795Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
          },
          {
            "name": "20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
          },
          {
            "name": "20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
          },
          {
            "name": "37527",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/37527/"
          },
          {
            "name": "75597",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75597"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
        },
        {
          "name": "20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
        },
        {
          "name": "20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
        },
        {
          "name": "37527",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/37527/"
        },
        {
          "name": "75597",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75597"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-2280",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection",
              "refsource": "MISC",
              "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
            },
            {
              "name": "20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
            },
            {
              "name": "20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
            },
            {
              "name": "37527",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/37527/"
            },
            {
              "name": "75597",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75597"
            },
            {
              "name": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-2280",
    "datePublished": "2017-07-24T15:00:00.000Z",
    "dateReserved": "2015-03-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T05:10:15.795Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2015-2280",
      "date": "2026-09-19",
      "epss": "0.16987",
      "percentile": "0.96924"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp_firmware:1.1.0-12_20120709:*:*:*:*:*:*:*",
                  "matchCriteriaId": "7159CD82-2775-4991-8B19-463EBA2D8B12",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "211C19A4-58B8-4F06-B4FB-FD596A6DF902",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter."
        },
        {
          "lang": "es",
          "value": "El archivo snwrite.cgi en la c\u00e1mara de red SkyIPCam1620W Wireless N MPEG4 3GPP con firmware versi\u00f3n  FW_AIC1620W_1.1.0-12_20120709_r1192.pck  de  AirLink101, permite a los usuarios autenticados remotamente ejecutar comandos de sistema operativo arbitrarios por medio de metacaracteres shell en el par\u00e1metro mac."
        }
      ],
      "id": "CVE-2015-2280",
      "lastModified": "2024-11-21T02:27:08.430",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": true,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "SINGLE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 9.0,
              "confidentialityImpact": "COMPLETE",
              "integrityImpact": "COMPLETE",
              "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 8.0,
            "impactScore": 10.0,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ],
        "cvssMetricV30": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.0"
            },
            "exploitabilityScore": 2.8,
            "impactScore": 5.9,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2017-07-25T01:29:00.467",
      "references": [
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit",
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit",
            "Mailing List",
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securityfocus.com/bid/75597"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit",
            "Technical Description",
            "Third Party Advisory"
          ],
          "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit",
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "https://www.exploit-db.com/exploits/37527/"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit",
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit",
            "Mailing List",
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "http://www.securityfocus.com/bid/75597"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit",
            "Technical Description",
            "Third Party Advisory"
          ],
          "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit",
            "Third Party Advisory",
            "VDB Entry"
          ],
          "url": "https://www.exploit-db.com/exploits/37527/"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-78"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp_firmware:1.1.0-12_20120709:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7159CD82-2775-4991-8B19-463EBA2D8B12",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "211C19A4-58B8-4F06-B4FB-FD596A6DF902",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter."
          },
          {
            "lang": "es",
            "value": "El archivo snwrite.cgi en la c\u00e1mara de red SkyIPCam1620W Wireless N MPEG4 3GPP con firmware versi\u00f3n  FW_AIC1620W_1.1.0-12_20120709_r1192.pck  de  AirLink101, permite a los usuarios autenticados remotamente ejecutar comandos de sistema operativo arbitrarios por medio de metacaracteres shell en el par\u00e1metro mac."
          }
        ],
        "id": "CVE-2015-2280",
        "lastModified": "2026-05-13T00:24:29.033",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": true,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.0,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.0,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV30": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2017-07-25T01:29:00.467",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Mailing List",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/75597"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Technical Description",
              "Third Party Advisory"
            ],
            "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://www.exploit-db.com/exploits/37527/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Mailing List",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "http://www.securityfocus.com/bid/75597"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Technical Description",
              "Third Party Advisory"
            ],
            "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Third Party Advisory",
              "VDB Entry"
            ],
            "url": "https://www.exploit-db.com/exploits/37527/"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-78"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CNVD-2015-04491

Vulnerability from cnvd - Published: 2015-07-15

Title

AirLink101 SkyIPCam1620W 'snwrite.cgi' OS命令注入漏洞

Description

AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera是一款无线网络摄像机产品。 AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera ‘snwrite.cgi’脚本未能确过滤用户提交的输入，允许远程攻击者利用漏洞提交的请求，以WEB权限执行任意OS命令。

Severity

高

Formal description

目前没有详细解决方案提供： http://www.airlink101.com/

Reference

http://www.securityfocus.com/bid/75597

Impacted products

Name
AirLink101 SkyIPCam1620W

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "75597"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-2280"
    }
  },
  "description": "AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera\u662f\u4e00\u6b3e\u65e0\u7ebf\u7f51\u7edc\u6444\u50cf\u673a\u4ea7\u54c1\u3002\r\n\r\nAirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera \u2018snwrite.cgi\u2019\u811a\u672c\u672a\u80fd\u786e\u8fc7\u6ee4\u7528\u6237\u63d0\u4ea4\u7684\u8f93\u5165\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u63d0\u4ea4\u7684\u8bf7\u6c42\uff0c\u4ee5WEB\u6743\u9650\u6267\u884c\u4efb\u610fOS\u547d\u4ee4\u3002",
  "discovererName": "Nahuel Riva of Core Security.",
  "formalWay": "\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\nhttp://www.airlink101.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-04491",
  "openTime": "2015-07-15",
  "products": {
    "product": "AirLink101 SkyIPCam1620W"
  },
  "referenceLink": "http://www.securityfocus.com/bid/75597",
  "serverity": "\u9ad8",
  "submitTime": "2015-07-12",
  "title": "AirLink101 SkyIPCam1620W \u0027snwrite.cgi\u0027 OS\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e"
}

FKIE_CVE-2015-2280

Vulnerability from fkie_nvd - Published: 2017-07-25 01:29 - Updated: 2026-06-17 00:23

Shadowserver Previdian

Severity

8.8 (High) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
cve@mitre.org	http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html	Exploit, Third Party Advisory, VDB Entry
cve@mitre.org	http://seclists.org/fulldisclosure/2015/Jul/40	Exploit, Mailing List, Third Party Advisory, VDB Entry
cve@mitre.org	http://www.securityfocus.com/archive/1/535963/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/bid/75597	Third Party Advisory, VDB Entry
cve@mitre.org	https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection	Exploit, Technical Description, Third Party Advisory
cve@mitre.org	https://www.exploit-db.com/exploits/37527/	Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html	Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://seclists.org/fulldisclosure/2015/Jul/40	Exploit, Mailing List, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/535963/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/75597	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection	Exploit, Technical Description, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.exploit-db.com/exploits/37527/	Exploit, Third Party Advisory, VDB Entry

Impacted products

	Vendor	Product	Version
	airlink101	skyipcam1620w_wireless_n_mpeg4_3gpp_firmware	1.1.0-12_20120709
	airlink101	skyipcam1620w_wireless_n_mpeg4_3gpp	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp_firmware:1.1.0-12_20120709:*:*:*:*:*:*:*",
              "matchCriteriaId": "7159CD82-2775-4991-8B19-463EBA2D8B12",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "211C19A4-58B8-4F06-B4FB-FD596A6DF902",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter."
    },
    {
      "lang": "es",
      "value": "El archivo snwrite.cgi en la c\u00e1mara de red SkyIPCam1620W Wireless N MPEG4 3GPP con firmware versi\u00f3n  FW_AIC1620W_1.1.0-12_20120709_r1192.pck  de  AirLink101, permite a los usuarios autenticados remotamente ejecutar comandos de sistema operativo arbitrarios por medio de metacaracteres shell en el par\u00e1metro mac."
    }
  ],
  "id": "CVE-2015-2280",
  "lastModified": "2026-06-17T00:23:51.447",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": true,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-07-25T01:29:00.467",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Mailing List",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/75597"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Technical Description",
        "Third Party Advisory"
      ],
      "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://www.exploit-db.com/exploits/37527/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Mailing List",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/75597"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Technical Description",
        "Third Party Advisory"
      ],
      "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "https://www.exploit-db.com/exploits/37527/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-9XPP-PM7C-3QWM

Vulnerability from github – Published: 2022-05-14 02:49 – Updated: 2025-04-20 03:41

Details

Severity

8.8 (High)


                  
                    CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2015-2280"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-78"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-07-25T01:29:00Z",
    "severity": "HIGH"
  },
  "details": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.",
  "id": "GHSA-9xpp-pm7c-3qwm",
  "modified": "2025-04-20T03:41:22Z",
  "published": "2022-05-14T02:49:20Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-2280"
    },
    {
      "type": "WEB",
      "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
    },
    {
      "type": "WEB",
      "url": "https://www.exploit-db.com/exploits/37527"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/75597"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2015-2280

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2015-2280

Aliases

CVE-2015-2280

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2015-2280",
    "description": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.",
    "id": "GSD-2015-2280",
    "references": [
      "https://packetstormsecurity.com/files/cve/CVE-2015-2280"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-2280"
      ],
      "details": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.",
      "id": "GSD-2015-2280",
      "modified": "2023-12-13T01:20:00.266752Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2015-2280",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection",
            "refsource": "MISC",
            "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
          },
          {
            "name": "20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
          },
          {
            "name": "20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection",
            "refsource": "FULLDISC",
            "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
          },
          {
            "name": "37527",
            "refsource": "EXPLOIT-DB",
            "url": "https://www.exploit-db.com/exploits/37527/"
          },
          {
            "name": "75597",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/75597"
          },
          {
            "name": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp_firmware:1.1.0-12_20120709:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-2280"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-78"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "37527",
              "refsource": "EXPLOIT-DB",
              "tags": [
                "Exploit",
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "https://www.exploit-db.com/exploits/37527/"
            },
            {
              "name": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Technical Description",
                "Third Party Advisory"
              ],
              "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
            },
            {
              "name": "75597",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/75597"
            },
            {
              "name": "20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection",
              "refsource": "FULLDISC",
              "tags": [
                "Exploit",
                "Mailing List",
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://seclists.org/fulldisclosure/2015/Jul/40"
            },
            {
              "name": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html"
            },
            {
              "name": "20150708 [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": true,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.0,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2018-10-09T19:56Z",
      "publishedDate": "2017-07-25T01:29Z"
    }
  }
}

VAR-201707-0081

Vulnerability from variot - Updated: 2023-12-18 12:29

snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter. AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera is a wireless network camera product. Successfully exploiting this issue may allow an attacker to execute arbitrary OS commands in the context of the affected device

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201707-0081",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "skyipcam1620w wireless n mpeg4 3gpp",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "airlink101",
        "version": "1.1.0-12_20120709"
      },
      {
        "model": "skyipcam1620w wireless n mpeg4 3gpp network camera",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "airlink101",
        "version": "fw_aic1620w_1.1.0-12_20120709_r1192.pck"
      },
      {
        "model": "skyipcam1620w",
        "scope": null,
        "trust": 0.6,
        "vendor": "airlink101",
        "version": null
      },
      {
        "model": "skyipcam1620w wireless n mpeg4 3gpp network camera fw aic1620w 1.0-12 2",
        "scope": null,
        "trust": 0.3,
        "vendor": "airlink101",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      },
      {
        "db": "BID",
        "id": "75597"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007669"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-2280"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201507-212"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp_firmware:1.1.0-12_20120709:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-2280"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Nahuel Riva of Core Security.",
    "sources": [
      {
        "db": "BID",
        "id": "75597"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201507-212"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2015-2280",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": true,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.0,
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Low",
            "accessVector": "Network",
            "authentication": "Single",
            "author": "NVD",
            "availabilityImpact": "Complete",
            "baseScore": 9.0,
            "confidentialityImpact": "Complete",
            "exploitabilityScore": null,
            "id": "CVE-2015-2280",
            "impactScore": null,
            "integrityImpact": "Complete",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2015-04491",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.0,
            "id": "VHN-80241",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:S/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.8,
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 8.8,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2015-2280",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2015-2280",
            "trust": 1.8,
            "value": "HIGH"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2015-04491",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201507-212",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-80241",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80241"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007669"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-2280"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201507-212"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter. AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera is a wireless network camera product. \nSuccessfully exploiting this issue may allow an attacker to execute arbitrary OS commands in the context of the affected device",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-2280"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007669"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      },
      {
        "db": "BID",
        "id": "75597"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80241"
      }
    ],
    "trust": 2.52
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-80241",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-80241"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2015-2280",
        "trust": 3.4
      },
      {
        "db": "BID",
        "id": "75597",
        "trust": 2.6
      },
      {
        "db": "EXPLOIT-DB",
        "id": "37527",
        "trust": 1.7
      },
      {
        "db": "PACKETSTORM",
        "id": "132609",
        "trust": 1.7
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007669",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201507-212",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-04491",
        "trust": 0.6
      },
      {
        "db": "SEEBUG",
        "id": "SSVID-97585",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-80241",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80241"
      },
      {
        "db": "BID",
        "id": "75597"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007669"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-2280"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201507-212"
      }
    ]
  },
  "id": "VAR-201707-0081",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80241"
      }
    ],
    "trust": 1.7
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      }
    ]
  },
  "last_update_date": "2023-12-18T12:29:34.028000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "SkyIPCam1620W Wireless N MPEG4 3GPP Network Camera",
        "trust": 0.8,
        "url": "http://airlink101.com/download_links/m-aic1620w.pdf"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007669"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-78",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-80241"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007669"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-2280"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.8,
        "url": "https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection"
      },
      {
        "trust": 2.3,
        "url": "http://www.securityfocus.com/bid/75597"
      },
      {
        "trust": 1.7,
        "url": "https://www.exploit-db.com/exploits/37527/"
      },
      {
        "trust": 1.7,
        "url": "http://seclists.org/fulldisclosure/2015/jul/40"
      },
      {
        "trust": 1.7,
        "url": "http://packetstormsecurity.com/files/132609/airlink101-skyipcam1620w-os-command-injection.html"
      },
      {
        "trust": 1.1,
        "url": "http://www.securityfocus.com/archive/1/535963/100/0/threaded"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-2280"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2015-2280"
      },
      {
        "trust": 0.6,
        "url": "http://www.securityfocus.com/archive/1/archive/1/535963/100/0/threaded"
      },
      {
        "trust": 0.3,
        "url": "http://www.airlink101.com/"
      },
      {
        "trust": 0.3,
        "url": "http://airlink101.com/products/aic1620w.php"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80241"
      },
      {
        "db": "BID",
        "id": "75597"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007669"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-2280"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201507-212"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      },
      {
        "db": "VULHUB",
        "id": "VHN-80241"
      },
      {
        "db": "BID",
        "id": "75597"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-007669"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-2280"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201507-212"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2015-07-15T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      },
      {
        "date": "2017-07-25T00:00:00",
        "db": "VULHUB",
        "id": "VHN-80241"
      },
      {
        "date": "2015-07-08T00:00:00",
        "db": "BID",
        "id": "75597"
      },
      {
        "date": "2017-08-28T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-007669"
      },
      {
        "date": "2017-07-25T01:29:00.467000",
        "db": "NVD",
        "id": "CVE-2015-2280"
      },
      {
        "date": "2015-07-09T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201507-212"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2015-07-15T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      },
      {
        "date": "2018-10-09T00:00:00",
        "db": "VULHUB",
        "id": "VHN-80241"
      },
      {
        "date": "2015-07-08T00:00:00",
        "db": "BID",
        "id": "75597"
      },
      {
        "date": "2017-08-28T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-007669"
      },
      {
        "date": "2018-10-09T19:56:12.937000",
        "db": "NVD",
        "id": "CVE-2015-2280"
      },
      {
        "date": "2017-07-25T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201507-212"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201507-212"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "AirLink101 SkyIPCam1620W \u0027snwrite.cgi\u0027 OS Command Injection Vulnerability",
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-04491"
      },
      {
        "db": "BID",
        "id": "75597"
      }
    ],
    "trust": 0.9
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "operating system commend injection",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201507-212"
      }
    ],
    "trust": 0.6
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2015-2280 (GCVE-0-2015-2280)

Shadowserver

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Characteristics

Timestamps

Scope

Evidence

Honeypot In The Wild Attempts Confidence: 70% Source: shadowserver

Details

References

Previdian

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Public Report Successful Exploitation Confidence: 70% Source: kevintel

Details

References

CNVD-2015-04491

FKIE_CVE-2015-2280

GHSA-9XPP-PM7C-3QWM

GSD-2015-2280

VAR-201707-0081

Tags

Sightings

Nomenclature

Related by attack behaviour