VulnerabilityModified

CVE-2013-1594

An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text.

HIGH 7.5EPSS 7.33%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (7.33%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 7.33% probability · 94th percentile
CISA KEV: Not listed
Weakness: CWE-200
Affected: vivotek/pt7135 firmware
Source: cve@mitre.org

References

http://www.exploit-db.com/exploits/25139Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/59572Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/83943Third Party Advisory, VDB Entry
https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txtExploit, Third Party Advisory
https://packetstormsecurity.com/files/cve/CVE-2013-1594Third Party Advisory, VDB Entry
https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilitiesExploit, Third Party Advisory
http://www.exploit-db.com/exploits/25139Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/59572Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/83943Third Party Advisory, VDB Entry
https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txtExploit, Third Party Advisory
https://packetstormsecurity.com/files/cve/CVE-2013-1594Third Party Advisory, VDB Entry
https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilitiesExploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.