Vulnerability CVE-2013-3687

Vulnerability CVE-2013-3687

Published: 2013-10-11 Modified: 2013-10-12

Description:

AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file.

See advisories in our WLB2 database:

	Topic	Author	Date
High	Airlive CSRF / Traversal / Disclosure / Denial Of Service	Eliezer Varade L...	13.06.2013

Type:

CWE-310

(Cryptographic Issues)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:N/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.8/10	6.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	None	None

Affected software
Ovislink -> Airlive od-2025hd
Ovislink -> Airlive od-2060hd
Ovislink -> Airlive poe100hd
Ovislink -> Airlive poe200hd
Ovislink -> Airlive poe250hd
Ovislink -> Airlive poe2600hd

References:

http://seclists.org/fulldisclosure/2013/Jun/84

Copyright 2024, cxsecurity.com