CVE-2013-2570

EUVD-2013-2512
A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function of the binary /opt/cgi/view/param, which could let a remove malicious user execute arbitrary code.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
zaviof3105_firmware
𝑥
≤ 1.6.03
zaviof312a_firmware
𝑥
≤ 1.6.03
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/60188
https://exchange.xforce.ibmcloud.com/vulnerabilities/84567
https://packetstormsecurity.com/files/cve/CVE-2013-2570
https://www.coresecurity.com/advisories/zavio-ip-cameras-multiple-vulnerabilities
http://www.securityfocus.com/bid/60188
https://exchange.xforce.ibmcloud.com/vulnerabilities/84567
https://packetstormsecurity.com/files/cve/CVE-2013-2570
https://www.coresecurity.com/advisories/zavio-ip-cameras-multiple-vulnerabilities