tripwire.com
http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera CVE-2013-3312
HIGH
Loftek Nexus 543 IP Cameras - Multiple Vulnerabilities
Record summary
CVE-2013-3312 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change (1) passwords or (2) firewall configuration, as demonstrated by a request to set_users.cgi.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBLoftek Nexus 543 IP Cameras - Multiple VulnerabilitiesExploitDB exploitby Craig YoungNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2013-3312 exploit-db.com
https://www.exploit-db.com/exploits/27878