9.8
CVSSv3

CVE-2013-2568

Published: 29/01/2020 Updated: 01/02/2020
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

A Command Injection vulnerability exists in Zavio IP Cameras up to and including 1.6.3 via the ap parameter to /cgi-bin/mft/wireless_mft.cgi, which could let a remote malicious user execute arbitrary code.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

zavio f3105_firmware

zavio f312a_firmware

Exploits

Core Security - Corelabs Advisory corelabscoresecuritycom Zavio IP Cameras multiple vulnerabilities 1 *Advisory Information* Title: Zavio IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0302 Advisory URL: wwwcoresecuritycom/advisories/zavio-IP-cameras-multiple-vulnerabilities Date published: 2013-05-28 Date of last ...
Core Security Technologies Advisory - Zavio IP cameras based on firmware versions 1603 and below suffer from bypass, hard-coded credential, and arbitrary command execution vulnerabilities ...