Record summary

CVE-2013-3312 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change (1) passwords or (2) firewall configuration, as demonstrated by a request to set_users.cgi.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBLoftek Nexus 543 IP Cameras - Multiple VulnerabilitiesExploitDB exploitby Craig YoungNot analyzed1 file

linked to 4 vulnerabilities

ExploitDB

PoC details

References

3