PT-2013-5616 · Cisco · Cisco Video Surveillance 4000 Ip Cameras

Published 2013-10-16 · Updated 2013-10-17 · CVE-2013-5535

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Video Surveillance 4000 IP cameras (affected versions not specified)

Description The issue concerns hardcoded credentials on the analytics page of the affected cameras. This allows remote attackers to access the video feed by using the hardcoded password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2013-5535

Affected Products

Cisco Video Surveillance 4000 Ip Cameras

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-5535 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5535 · Vendor Advisory