Is CVE-2014-3895 actively exploited?

No active exploitation of CVE-2014-3895 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2014-3895 be exploited remotely?

Yes. CVE-2014-3895 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2014-3895?

CVE-2014-3895 has a CVSS score of 6.4 (MEDIUM).

HOME VULNERABILITIESCVE-2014-3895

MEDIUM

CVE-2014-3895

CWE-287Published: July 29, 2014· Updated: Jun 17, 2026

6.4

CVSS v3.1

Official Description

The I-O DATA TS-WLCAM camera with firmware 1.06 and earlier, TS-WLCAM/V camera with firmware 1.06 and earlier, TS-WPTCAM camera with firmware 1.08 and earlier, TS-PTCAM camera with firmware 1.08 and earlier, TS-PTCAM/POE camera with firmware 1.08 and earlier, and TS-WLC2 camera with firmware 1.02 and earlier allow remote attackers to bypass authentication, and consequently obtain sensitive credential and configuration data, via unspecified vectors.

NVD Source

Technical Analysis

CVE-2014-3895 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

From a weakness classification perspective (CWE-287): Authentication bypass vulnerabilities allow attackers to access protected resources without valid credentials.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityP

IntegrityP

AvailabilityNone

AV:N/AC:L/Au:N/C:P/I:P/A:N

Affected Vendors & Products

iodata12 product(s)

ts-wlcam\/v camera firmwarets-wlcam\/v camerats-wptcam camera firmwarets-wptcam camerats-wlcam camera firmwarets-wlcam camerats-ptcam\/poe camera firmwarets-ptcam\/poe camerats-wlc2 camera firmwarets-wlc2 camerats-ptcam camera firmwarets-ptcam camera

Source: NVD CPE · 12 total CPE entries