CVE-2013-3687

AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://seclists.org/fulldisclosure/2013/Jun/84

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:ovislink:airlive_od-2025hd:-:::::::*
	cpe:2.3:h:ovislink:airlive_od-2060hd:-:::::::*
	cpe:2.3:h:ovislink:airlive_poe100hd:-:::::::*
	cpe:2.3:h:ovislink:airlive_poe200hd:-:::::::*
	cpe:2.3:h:ovislink:airlive_poe250hd:-:::::::*
	cpe:2.3:h:ovislink:airlive_poe2600hd:-:::::::*

History

No history.

Information

Published : 2013-10-11 21:55

Updated : 2024-02-28 12:00

NVD link : CVE-2013-3687

Mitre link : CVE-2013-3687

CVE.ORG link : CVE-2013-3687

JSON object : View

Products Affected

ovislink

airlive_poe100hd
airlive_od-2060hd
airlive_poe250hd
airlive_poe2600hd
airlive_poe200hd
airlive_od-2025hd

CWE

CWE-310

Cryptographic Issues

{"id": "CVE-2013-3687", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-10-11T21:55:44.247", "references": [{"url": "http://seclists.org/fulldisclosure/2013/Jun/84", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-310"}]}], "descriptions": [{"lang": "en", "value": "AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file."}, {"lang": "es", "value": "Las c\u00e1maras AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, y posiblemente otros modelos utilizan texto plano para guardar informaci\u00f3n sensible, lo que permite a un atacante obtener contrase\u00f1as, nombres de usuarios y otra informaci\u00f3n leyendo un archivo de backup no especificado."}], "lastModified": "2013-10-15T14:20:19.063", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:ovislink:airlive_od-2025hd:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E9EB4F7-936E-4F14-80B9-229F487AE72A"}, {"criteria": "cpe:2.3:h:ovislink:airlive_od-2060hd:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "900C1CF9-83BB-416F-9912-FEBDBBA50C45"}, {"criteria": "cpe:2.3:h:ovislink:airlive_poe100hd:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "614196B2-B273-467E-8A54-AB2F656E331E"}, {"criteria": "cpe:2.3:h:ovislink:airlive_poe200hd:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADD365E4-8F40-4806-BF8B-44C5F9E35398"}, {"criteria": "cpe:2.3:h:ovislink:airlive_poe250hd:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "952713D2-C9EF-462B-8012-4CEB70BBA3F5"}, {"criteria": "cpe:2.3:h:ovislink:airlive_poe2600hd:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EB96839-74C9-462F-ABF2-612D54624BC3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}