high8.8
CVE-2013-3312
Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change (1) passwords or (2) firewall configuration, as demonstrated by a request to set_users.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Loftek | Nexus 543 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera
- https://www.exploit-db.com/exploits/27878
- http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera
- https://www.exploit-db.com/exploits/27878