NVD Vulnerability Detail

CVE-2013-1594

Summary	An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text.
Publication Date	Jan. 25, 2020, 2:15 a.m.
Registration Date	Jan. 26, 2021, 3:36 p.m.
Last Update	Nov. 21, 2024, 10:49 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://www.exploit-db.com/exploits/25139	Exploit Third Party Advisory VDB Entry
2	http://www.exploit-db.com/exploits/25139	Exploit Third Party Advisory VDB Entry
3	http://www.securityfocus.com/bid/59572	Third Party Advisory VDB Entry
4	http://www.securityfocus.com/bid/59572	Third Party Advisory VDB Entry
5	https://exchange.xforce.ibmcloud.com/vulnerabilities/83943	Third Party Advisory VDB Entry
6	https://exchange.xforce.ibmcloud.com/vulnerabilities/83943	Third Party Advisory VDB Entry
7	https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt	Exploit Third Party Advisory
8	https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txt	Exploit Third Party Advisory
9	https://packetstormsecurity.com/files/cve/CVE-2013-1594	Third Party Advisory VDB Entry
10	https://packetstormsecurity.com/files/cve/CVE-2013-1594	Third Party Advisory VDB Entry
11	https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities	Exploit Third Party Advisory
12	https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities	Exploit Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-200	情報漏えい	https://cwe.mitre.org/data/definitions/200.html

JVN Vulnerability Information

Vivotek PT7135 IP Camera における情報漏えいに関する脆弱性

Title	Vivotek PT7135 IP Camera における情報漏えいに関する脆弱性
Summary	Vivotek PT7135 IP Camera には、情報漏えいに関する脆弱性が存在します。
Possible impacts	情報を取得される可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	April 29, 2013, midnight
Registration Date	Feb. 10, 2020, 10:41 a.m.
Last Update	Feb. 10, 2020, 10:41 a.m.

Affected System

VIVOTEK Inc.

pt7135 ファームウェア 0300a

pt7135 ファームウェア 0400a

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2013-1594	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1594
National Vulnerability Database (NVD)
2	CVE-2013-1594	https://nvd.nist.gov/vuln/detail/CVE-2013-1594

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-200	https://jvndb.jvn.jp/ja/cwe/CWE-200.html

ベンダー情報

No	Name	URL
VIVOTEK
1	Top Page	https://www.vivotek.com/

その他

No	Name	URL
関連文書
1	Vivotek IP Cameras Multiple Vulnerabilities	https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilities

Change Log

No	Changed Details	Date of change
1	[2020年02月10日] 掲載	Feb. 10, 2020, 10:41 a.m.