Vulnerability Details CVE-2013-1597
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.109
EPSS Ranking 93.1%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
References
- http://www.securityfocus.com/bid/59576
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83947
- https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt
- https://packetstormsecurity.com/files/cve/CVE-2013-1597
- https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities
- http://www.securityfocus.com/bid/59576
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83947
- https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt
- https://packetstormsecurity.com/files/cve/CVE-2013-1597
- https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities
Products affected by CVE-2013-1597
-
cpe:2.3:h:vivotek:pt7135:-
-
cpe:2.3:o:vivotek:pt7135_firmware:0300a
-
cpe:2.3:o:vivotek:pt7135_firmware:0400a