CVE-2013-3313 - The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to check_users.cgi

Back Back to CVE browser

HIGH

The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to check_users.cgi

Published Nov 21, 2019

7.5

HIGH

CVSS 3.1

EPSS 2.64%

Description

The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to check_users.cgi. NOTE: cleartext passwords can also be obtained from proc/kcore when leveraging the directory traversal vulnerability in CVE-2013-3311.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (3)

http://www.securityfocus.com/bid/61971
x_refsource_MISCThird Party AdvisoryVDB Entry
http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera
x_refsource_MISCExploit
https://www.exploit-db.com/exploits/27878
x_refsource_MISCExploitThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://www.securityfocus.com/bid/61971		x_refsource_MISCThird Party AdvisoryVDB Entry
http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera		x_refsource_MISCExploit
https://www.exploit-db.com/exploits/27878		x_refsource_MISCExploitThird Party AdvisoryVDB Entry