Vulnérabilité CVE-2013-2567 CVE Vulnerability

An Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1.6.03 due to a hardcoded admin account found in boa.conf, which lets a remote malicious user obtain sensitive information. (CVSS:5.0) (Last Update:2020-02-01)

Vulnerability Details : (1 public exploit) An Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1.6.03 due to a hardcoded admin account found in boa.conf, which lets a remote malicious user obtain sensitive information. Publish Date : 2020-01-29 Last Update Date : 2020-02-01 - CVSS Scores & Vulnerability Types CVSS Score 5.0 Confidentiality Impact Partial(There is considerable informational disclosure.) Integrity Impact None(There is no impact to the integrity of the system) Availability Impact None(There is no impact to the availability of the system.) Access Complexity Low(Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. ) Authentication Not required(Authentication is not required to exploit the vulnerability.) Gained Access None Vulnerability Type(s) Bypass a restriction or similarObtain Information CWE ID 798 - Products Affected By CVE-2013-2567 # Product Type Vendor Product Version Update Edition Language No vulnerable product found. If the vulnerability is created recently it may take a few days to gather vulnerable products list and other information like cvss scores. Please check again in a few days. - References For CVE-2013-2567 http://www.securityfocus.com/bid/60189 https://exchange.xforce.ibmcloud.com/vulnerabilities/84568 http://www.coresecurity.com/advisories/zavio-IP-cameras-multiple-vulnerabilities Exploit!http://www.exploit-db.com/exploits/25815 Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities Author:Core Security Release Date:2013-05-29 (hardware) webapps

- Metasploit Modules Related To CVE-2013-2567 There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)