CVE:CVE-2015-2279
CNNVD:CNNVD-201507-355
OvisLink AirLive IP Cameras MD-3025、IP Cameras BU-3026和IP Cameras BU-2015都是欧立科技（OvisLink）公司的网络摄像机产品。
多款OvisLink AirLive产品的cgi_test.cgi二进制文件中存在操作系统命令注入漏洞。攻击者可借助‘write_mac write_pid’、‘write_msn’、‘write_tan’或‘write_hdv’参数中的‘&’之后的shell元字符利用该漏洞执行任意操作系统命令。以下产品受到影响：使用1.81版本固件的OvisLink AirLive IP Cameras MD-3025，使用1.43版本固件的IP Cameras BU-3026，使用1.03.18版本固件的IP Cameras BU-2015。
solution:Upgrade airlive bu-2015_firmware to a higher version than 1.03.18,and avoid the version 1.03.18; Upgrade airlive bu-3026_firmware to a higher version than 1.43,and avoid the version 1.43; Upgrade airlive md-3025_firmware to a higher version than 1.81,and avoid the version 1.81