Vulnerabilities > CVE-2013-4985 - Incorrect Authorization vulnerability in Vivotek Ip7160 Firmware, Ip7361 Firmware and Ip8332 Firmware

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
vivotek
CWE-863
exploit available
NVD
Published: 2019-12-27
Updated: 2020-01-17

Summary

Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream

Vulnerable Configurations

Part Description Count
OS
Vivotek
6
Hardware
Vivotek
3

Common Weakness Enumeration (CWE)

Exploit-Db

descriptionVivotek IP Cameras - RTSP Authentication Bypass. CVE-2013-4985. Webapps exploit for hardware platform
idEDB-ID:29516
last seen2016-02-03
modified2013-11-08
published2013-11-08
reporterCore Security
sourcehttps://www.exploit-db.com/download/29516/
titleVivotek IP Cameras - RTSP Authentication Bypass

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/123920/CORE-2013-0704.txt
idPACKETSTORM:123920
last seen2016-12-05
published2013-11-05
reporterCore Security Technologies
sourcehttps://packetstormsecurity.com/files/123920/Vivotek-IP-Cameras-RTSP-Authentication-Bypass.html
titleVivotek IP Cameras RTSP Authentication Bypass

Seebug

bulletinFamilyexploit
descriptionNo description provided by source.
idSSV:83014
last seen2017-11-19
modified2014-07-01
published2014-07-01
reporterRoot
sourcehttps://www.seebug.org/vuldb/ssvid-83014
titleVivotek IP Cameras - RTSP Authentication Bypass

References