CVE-2013-3312

Опубликовано: 21 нояб. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change (1) passwords or (2) firewall configuration, as demonstrated by a request to set_users.cgi.

Ссылки

http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/27878
Exploit
Third Party Advisory
VDB Entry
http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/27878
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:loftek:nexus_543_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:loftek:nexus_543:-:*:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00182

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-3vhv-x955-xcm8

github

почти 4 года назад