Secunia

John Doe has reported a vulnerability in Linksys WVC11B Wireless-B Internet Video Camera, which can be exploited by malicious people to gain knowledge of sensitive information.

It is possible to disclose the content of arbitrary files by passing their path to the "next_file" parameter in "main.cgi".

Example:
http://[victim]/main.cgi?next_file=/etc/passwd

The vulnerability has been reported in firmware release 2.10. Other versions may also be affected.

Solution
Restrict access to the web interface.

Provided and/or discovered by
John Doe

Deep Links
Links available in Customer Area