CVE-2013-2568

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 49%

from disclosure to weapon0 days

Published on NVDJan 29

1st PoCMay 29

exploitation probability

49%top 1% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wireless_mft.cgi, which could let a remote malicious user execute arbitrary code.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/cve/CVE-2013-2568/page1/unverified exploitdbwww.exploit-db.com/exploits/25815unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/84569 https://packetstormsecurity.com/files/cve/CVE-2013-2568/page1/https://vulmon.com/vulnerabilitydetails?qid=CVE-2013-2568 https://www.coresecurity.com/advisories/zavio-ip-cameras-multiple-vulnerabilities http://www.securityfocus.com/bid/60190