CVE-2013-1596 : An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a

An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554.

Published 2020-01-24 18:15:12

Updated 2020-01-31 18:10:50

Source MITRE

View at NVD, CVE.org

Vulnerability category: BypassGain privilege

Products affected by CVE-2013-1596

Vivotek » Pt7135 Firmware » Version: 0300a
cpe:2.3:o:vivotek:pt7135_firmware:0300a:*:*:*:*:*:*:*
Matching versions
When used together with: Vivotek » Pt7135 » Version: N/A
Vivotek » Pt7135 Firmware » Version: 0400a
cpe:2.3:o:vivotek:pt7135_firmware:0400a:*:*:*:*:*:*:*
Matching versions
When used together with: Vivotek » Pt7135 » Version: N/A

EPSS FAQ

21.25%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 96 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Assigned by: nvd@nist.gov (Primary)

https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities

Vivotek IP Cameras Multiple Vulnerabilities | Core Security
Exploit;Third Party Advisory

CVEs referencing this url
https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt

exploitdb/25139.txt at master · offensive-security/exploitdb · GitHub
Exploit;Third Party Advisory

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/83945

Multiple Vivotek IP Cameras products security bypass CVE-2013-1596 Vulnerability Report
Third Party Advisory;VDB Entry
https://packetstormsecurity.com/files/cve/CVE-2013-1596

CVE-2013-1596 ≈ Packet Storm
Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/59574

Multiple Vivotek IP Camera Products CVE-2013-1596 Remote Authentication Bypass Vulnerability
Third Party Advisory;VDB Entry

Jump to