CVE-2013-1594

Published: Jan 24, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text.

Affected (2)

Products: Vivotek: Pt7135 Firmware

Vivotek

1 product

Pt7135 Firmware

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Vivotek Pt7135 Firmware	Version 0300a
Vivotek Pt7135 Firmware	Version 0400a

Running on/with	Platform Versions
Vivotek Pt7135	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://www.exploit-db.com/exploits/25139

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/59572

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/83943

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt

Source: cve@mitre.org

ExploitThird Party Advisory

https://packetstormsecurity.com/files/cve/CVE-2013-1594

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities

Source: cve@mitre.org

ExploitThird Party Advisory

http://www.exploit-db.com/exploits/25139