Vulnerabilities > CVE-2013-3687 - Cryptographic Issues vulnerability in Ovislink products

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
ovislink
CWE-310
exploit available

Summary

AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file.

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

  • Signature Spoofing by Key Recreation
    An attacker obtains an authoritative or reputable signer's private signature key by exploiting a cryptographic weakness in the signature algorithm or pseudorandom number generation and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.

Exploit-Db

descriptionAirlive IP Cameras - Multiple Vulnerabilities. CVE-2013-3540,CVE-2013-3541,CVE-2013-3686,CVE-2013-3687,CVE-2013-3691. Webapps exploit for hardware platform
idEDB-ID:26174
last seen2016-02-03
modified2013-06-13
published2013-06-13
reporterSánchez, Lopez, Castillo
sourcehttps://www.exploit-db.com/download/26174/
titleAirlive IP Cameras - Multiple Vulnerabilities

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/122001/airlive-xsrfdostraversal.txt
idPACKETSTORM:122001
last seen2016-12-05
published2013-06-13
reporterJavier Repiso Sanchez
sourcehttps://packetstormsecurity.com/files/122001/Airlive-CSRF-Traversal-Disclosure-Denial-Of-Service.html
titleAirlive CSRF / Traversal / Disclosure / Denial Of Service