PT-2013-4565 · Airlive · Airlive Poe2600Hd+6

Jonás Ropero Castillo · Published 2013-10-11 · Updated 2013-10-15 · CVE-2013-3687

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD (affected versions not specified)

Description The issue concerns the storage of sensitive information in cleartext, allowing attackers to obtain passwords, user names, and other sensitive data by reading an unspecified backup file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2013-3687

Affected Products

Airlive Od-2025Hd

Airlive Od-2060Hd

Airlive Od-325Hd

Airlive Poe100Hd

Airlive Poe200Hd

Airlive Poe250Hd

Airlive Poe2600Hd

References · 3

• 🔥 https://exploit-db.com/exploits/26174 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3687 · Security Note
• http://seclists.org/fulldisclosure/2013/Jun/84 · Note