First published: Fri Dec 27 2019(Updated: )
Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Vivotek Ip7160 Firmware | =0105a | |
Vivotek Ip7160 Firmware | =0105b | |
Vivotek Ip7160 | ||
Vivotek Ip7361 Firmware | =0105a | |
Vivotek Ip7361 Firmware | =0105b | |
Vivotek Ip7361 | ||
Vivotek Ip8332 Firmware | =0105a | |
Vivotek Ip8332 Firmware | =0105b | |
Vivotek Ip8332 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-4985 is a vulnerability in multiple Vivotek IP Cameras that allows remote authentication bypass and unauthorized access to the video stream.
Vivotek IP7160, IP7361, and IP8332 cameras with firmware versions 0105a and 0105b are affected.
The severity of CVE-2013-4985 is high, with a severity value of 7.5.
An attacker can exploit CVE-2013-4985 by bypassing the authentication mechanism and gaining unauthorized access to the video stream.
You can find more information about CVE-2013-4985 at the following references: [coresecurity.com](http://www.coresecurity.com/advisories/vivotek-ip-cameras-rtsp-authentication-bypass), [exploit-db.com](http://www.exploit-db.com/exploits/29516), [securityfocus.com](http://www.securityfocus.com/bid/63541).