Vulnerability Details CVE-2013-1594
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.224
EPSS Ranking 95.6%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.exploit-db.com/exploits/25139
- http://www.securityfocus.com/bid/59572
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83943
- https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt
- https://packetstormsecurity.com/files/cve/CVE-2013-1594
- https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities
- http://www.exploit-db.com/exploits/25139
- http://www.securityfocus.com/bid/59572
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83943
- https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt
- https://packetstormsecurity.com/files/cve/CVE-2013-1594
- https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities
Products affected by CVE-2013-1594
-
cpe:2.3:h:vivotek:pt7135:-
-
cpe:2.3:o:vivotek:pt7135_firmware:0300a
-
cpe:2.3:o:vivotek:pt7135_firmware:0400a