CVE-2013-3687
AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.54%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
- EPSS
- 2.54% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- ovislink/airlive od-2025hd · ovislink/airlive od-2060hd · ovislink/airlive poe100hd · ovislink/airlive poe200hd · ovislink/airlive poe250hd · ovislink/airlive poe2600hd
- Source
- cve@mitre.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.