Unrated severityNVD Advisory· Published Jun 25, 2009· Updated Apr 23, 2026

CVE-2009-2046

Description

The embedded web server on the Cisco Video Surveillance 2500 Series IP Camera with firmware before 2.1 allows remote attackers to read arbitrary files via a (1) http or (2) https request, related to the (a) SD Camera Web Server and the (b) Wireless Camera HTTP Server, aka Bug IDs CSCsu05515 and CSCsr96497.

Affected products

Cisco Systems, Inc./Video Surveillance 2500 Series Ip Camera
cpe:2.3:h:cisco:video_surveillance_2500_series_ip_camera:*:*:*:*:*:*:*:*
Range: <=2.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.cisco.com/en/US/products/products_security_advisory09186a0080ad0f8f.shtmlnvdPatchVendor Advisory
www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080ad1002.htmlnvd
www.securityfocus.com/bid/35478nvd
www.securitytracker.com/idnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000