403 matches found
CVE-2013-1594
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text...
CVE-2013-1594
Vivotek PT7135 IP cameras with firmware 0300a/0400a are affected by CVE-2013-1594 and related vulnerabilities involving information leakage via GET requests. CoreLabs describes that wireless keys and third‑party credentials are stored in clear text (FTP, share, SMTP, WEP/WPA keys, DynDNS, etc.), ...
PT-2020-7354
Name of the Vulnerable Software and Affected Versions: Vivotek PT7135 IP Camera versions 0300a through 0400a Description: An issue exists where sensitive information is disclosed through a GET request. This is due to the storage of wireless keys and 3rd party credentials in clear text, potentiall...
PT-2020-7356
Name of the Vulnerable Software and Affected Versions: Vivotek PT7135 IP Camera versions 0300a through 0400a Description: An authentication bypass issue exists, allowing access via specially crafted RTSP packets to the TCP port 554 endpoint. Recommendations: For versions 0300a through 0400a,...
CVE-2013-1597: Improper Limitation of a Pathname to a Restricted Directory
A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials...
CVE-2013-1596: Improper Authentication
An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554...
PT-2020-7355
Name of the Vulnerable Software and Affected Versions: Vivotek PT7135 IP Camera versions 0300a through 0400a Description: A Buffer Overflow issue exists via a specially crafted packet in the Authorization header field sent to the RTSP service. This could allow a remote malicious user to execute...
PT-2020-7358
Name of the Vulnerable Software and Affected Versions: Vivotek PT7135 IP Cameras versions 0300a through 0400a Description: A Command Injection issue exists, allowing a malicious user to execute arbitrary code via the system.ntp parameter to the farseer.out binary file. Recommendations: For versio...
CVE-2013-1594: Exposure of Sensitive Information to an Unauthorized Actor
An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text...
CVE-2013-1595: Buffer Copy without Checking Size of Input
A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or cause a Denial of Service...
PT-2020-7357
Name of the Vulnerable Software and Affected Versions: Vivotek PT7135 IP Cameras versions 0300a through 0400a Description: A Directory Traversal issue exists, allowing a malicious user to obtain user credentials via a specially crafted GET request. Recommendations: For versions 0300a through 0400...
CVE-2013-1598: Improper Neutralization of Special Elements used in an OS Command
A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code...
CVE-2013-4985
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream...
Authentication flaw
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream...
CVE-2013-4985
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream...
CVE-2013-4985
CVE-2013-4985 affects Vivotek IP cameras, enabling remote unauthenticated RTSP authentication bypass to access video streams. Core Security CoreLabs advisory CORE-2013-0704 describes exploiting RTSP basic auth bypass by sending crafted RTSP packets to port 554, tested on IP7160, IP7361, IP8332 wi...
PT-2019-6984
Name of the Vulnerable Software and Affected Versions Vivotek IP Cameras affected versions not specified Description The issue concerns a remote authentication bypass in Vivotek IP Cameras, which could allow unauthorized access to the video stream. Recommendations At the moment, there is no...
CVE-2013-4985: Incorrect Authorization
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream...