CVE-2013-5535

Published: Oct 16, 2013Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419.

Affected (3)

Products: Cisco: Video Surveillance 4000 Ip Camera, Video Surveillance 4300e Ip Camera, Video Surveillance 4500e Ip Camera

Cisco

3 products

Video Surveillance 4000 Ip Camera

Video Surveillance 4300e Ip Camera

Video Surveillance 4500e Ip Camera

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Video Surveillance 4000 Ip Camera	All versions
Cisco Video Surveillance 4300e Ip Camera	All versions
Cisco Video Surveillance 4500e Ip Camera	All versions

Related CWEs

CWE-255

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5535

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5535

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.