CVE-2009-1558

CVE Database · CVE-2009-1558

CVE-2009-1558

· N/AModified

CVSS v3.1

N/A

EPSS

28.81%

Published

May 6, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBLinksys WVC54GCA 1.00R22/1.00R24 (Wireless-G) - 'adm/file.cgi' Multiple Directory Traversal Vulnerabilities NucleiNuclei detection template TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. (encoded dot dot) or an absolute pathname in the next_file parameter.

Weaknesses (CWE)

CWE-22

Affected Products (2)

cisco · wvc54gcavulnerable

References (8)

http://www.gnucitizen.org/blog/hacking-linksys-ip-cameras-pt-3/

Exploit

http://www.securityfocus.com/bid/34713

Exploit

http://www.vupen.com/english/advisories/2009/1173

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/50231