Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-01-29	CVE-2013-2568	OS Command Injection vulnerability in Zavio F3105 Firmware and F312A Firmware A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wireless_mft.cgi, which could let a remote malicious user execute arbitrary code. network low complexity zavio CWE-78 critical	9.8
2020-01-29	CVE-2013-2570	OS Command Injection vulnerability in Zavio F3105 Firmware and F312A Firmware A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function of the binary /opt/cgi/view/param, which could let a remove malicious user execute arbitrary code. network low complexity zavio CWE-78 critical	9.8