high8.8Public exploit code
CVE-2013-1598
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold l…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vivotek IP Cameras - Multiple Vulnerabilities2013-05-01 · webapps · hardware · Verified
Impact
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vivotek | Pt7135 Firmware | Versions 0300a, 0400a |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/59575
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83946
- https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt
- https://packetstormsecurity.com/files/cve/CVE-2013-1598
- https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities
- http://www.securityfocus.com/bid/59575
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83946
- https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt
- https://packetstormsecurity.com/files/cve/CVE-2013-1598
- https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities