CVE-2013-5535

2022-10-0316:14:55

CWE-255

[email protected]

web.nvd.nist.gov

cve-2013-5535

cisco

video surveillance

ip cameras

hardcoded credentials

remote attackers

video feed

vulnerability

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.8%

JSON

The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419.

Affected configurations

NVD

Node

ciscovideo_surveillance_4000_ip_cameraMatch-

ciscovideo_surveillance_4300e_ip_cameraMatch-

ciscovideo_surveillance_4500e_ip_cameraMatch-

CPENameOperatorVersion
cisco:video_surveillance_4000_ip_cameracisco video surveillance 4000 ip cameraeq-
cisco:video_surveillance_4300e_ip_cameracisco video surveillance 4300e ip cameraeq-
cisco:video_surveillance_4500e_ip_cameracisco video surveillance 4500e ip cameraeq-

CPE	Name	Operator	Version
cisco:video_surveillance_4000_ip_camera	cisco video surveillance 4000 ip camera	eq	-
cisco:video_surveillance_4300e_ip_camera	cisco video surveillance 4300e ip camera	eq	-
cisco:video_surveillance_4500e_ip_camera	cisco video surveillance 4500e ip camera	eq	-