CVE-2013-5535
Published Oct 16, 2013
Last updated 11 years ago
Overview
- Description
- The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.4
- Impact score
- 4.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-255
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:video_surveillance_4000_ip_camera:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7725752F-91EE-4BDA-83A7-3830ED6D0791"
},
{
"criteria": "cpe:2.3:h:cisco:video_surveillance_4300e_ip_camera:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABE86502-7BBF-43C5-BFF2-0BF4E2D3C0C6"
},
{
"criteria": "cpe:2.3:h:cisco:video_surveillance_4500e_ip_camera:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0F88241-1468-4C3C-A4AF-513B7FAE85B0"
}
],
"operator": "OR"
}
]
}
]