VULNERABILITY INTELLIGENCE
CVE-2008-5674
CVSS score9.4 HIGH
EPSS probability4.51%
CISA KEVNot currently listed
Published2008-12-19
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:C
Description
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.
Weakness classification
- CWE-20: Improper Input Validation