{"cve":"CVE-2015-2280","epss":{"score":0.16987},"mitre":{"cpes":[],"created":"2017-07-24T15:00:00+00:00","description":"snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2015/2xxx/CVE-2015-2280.json","references":["http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html","http://seclists.org/fulldisclosure/2015/Jul/40","http://www.securityfocus.com/archive/1/535963/100/0/threaded","http://www.securityfocus.com/bid/75597","https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection","https://www.exploit-db.com/exploits/37527/"],"title":null,"updated":"2024-08-06T05:10:15.795000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:h:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp:-:*:*:*:*:*:*:*","cpe:2.3:o:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp_firmware:1.1.0-12_20120709:*:*:*:*:*:*:*"],"created":"2017-07-25T01:29:00.467000+00:00","description":"snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.","metrics":{"cvssV2_0":{"score":9.0,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C"},"cvssV3_0":{"score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2015/CVE-2015-2280.json","references":["http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html","http://seclists.org/fulldisclosure/2015/Jul/40","http://www.securityfocus.com/archive/1/535963/100/0/threaded","http://www.securityfocus.com/bid/75597","https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection","https://www.exploit-db.com/exploits/37527/"],"title":null,"updated":"2026-06-17T00:23:51.447000+00:00","vendors":["airlink101","airlink101$PRODUCT$skyipcam1620w_wireless_n_mpeg4_3gpp","airlink101$PRODUCT$skyipcam1620w_wireless_n_mpeg4_3gpp_firmware"],"weaknesses":["CWE-78"]},"opencve":{"changes":[],"cpes":{"data":["cpe:2.3:h:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp:-:*:*:*:*:*:*:*","cpe:2.3:o:airlink101:skyipcam1620w_wireless_n_mpeg4_3gpp_firmware:1.1.0-12_20120709:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2017-07-24T15:00:00+00:00","provider":"mitre"},"description":{"data":"snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":9.0,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C"},"provider":"nvd"},"cvssV3_0":{"data":{"score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"provider":"nvd"},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.16987},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["http://packetstormsecurity.com/files/132609/AirLink101-SkyIPCam1620W-OS-Command-Injection.html","http://seclists.org/fulldisclosure/2015/Jul/40","http://www.securityfocus.com/archive/1/535963/100/0/threaded","http://www.securityfocus.com/bid/75597","https://www.coresecurity.com/advisories/airlink101-skyipcam1620w-os-command-injection","https://www.exploit-db.com/exploits/37527/"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2025-04-20T01:37:25.860000+00:00","provider":"nvd"},"vendors":{"data":["airlink101","airlink101$PRODUCT$skyipcam1620w_wireless_n_mpeg4_3gpp","airlink101$PRODUCT$skyipcam1620w_wireless_n_mpeg4_3gpp_firmware"],"providers":["nvd"]},"weaknesses":{"data":["CWE-78"],"providers":["nvd"]}}}