CVE-2013-3687

Airlive IP Cameras - Multiple Vulnerabilities

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file.

Las cámaras AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, y posiblemente otros modelos utilizan texto plano para guardar información sensible, lo que permite a un atacante obtener contraseñas, nombres de usuarios y otra información leyendo un archivo de backup no especificado.

Airlive IP cameras suffers from information disclosure, clear text storage of sensitive information, cross site request forgery, denial of service, and path traversal vulnerabilities.

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-05-29 CVE Reserved
2013-06-13 CVE Published
2013-06-13 First Exploit
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-310: Cryptographic Issues

CAPEC

References (2)

URL	Tag	Source
http://seclists.org/fulldisclosure/2013/Jun/84	Mailing List

URL	Date	SRC
https://www.exploit-db.com/exploits/26174	2013-06-13

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ovislink Search vendor "Ovislink"		Airlive Od-2025hd Search vendor "Ovislink" for product "Airlive Od-2025hd"				-		-		Affected
Ovislink Search vendor "Ovislink"		Airlive Od-2060hd Search vendor "Ovislink" for product "Airlive Od-2060hd"				-		-		Affected
Ovislink Search vendor "Ovislink"		Airlive Poe100hd Search vendor "Ovislink" for product "Airlive Poe100hd"				-		-		Affected
Ovislink Search vendor "Ovislink"		Airlive Poe200hd Search vendor "Ovislink" for product "Airlive Poe200hd"				-		-		Affected
Ovislink Search vendor "Ovislink"		Airlive Poe250hd Search vendor "Ovislink" for product "Airlive Poe250hd"				-		-		Affected
Ovislink Search vendor "Ovislink"		Airlive Poe2600hd Search vendor "Ovislink" for product "Airlive Poe2600hd"				-		-		Affected