CVE-2013-1594

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 7.3%

from disclosure to weapon0 days

Published on NVDJan 24

1st PoCMay 1

exploitation probability

7.3%top 6% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text.

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/25139 cve_referencepacketstormsecurity.com/files/cve/CVE-2013-1594unverified cve_referencewww.exploit-db.com/exploits/25139unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/83943 https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt https://packetstormsecurity.com/files/cve/CVE-2013-1594 https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities http://www.exploit-db.com/exploits/25139 http://www.securityfocus.com/bid/59572