« Volver al listado

CVE-2013-3687

Estado: ModificadaAlta (7.8)—

AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3687",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-10-11T21:55:44.247",
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2013/Jun/84",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2013/Jun/84",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models use cleartext to store sensitive information, which allows attackers to obtain passwords, user names, and other sensitive information by reading an unspecified backup file."
    },
    {
      "lang": "es",
      "value": "Las cámaras AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, y posiblemente otros modelos utilizan texto plano para guardar información sensible, lo que permite a un atacante obtener contraseñas, nombres de usuarios y otra información leyendo un archivo de backup no especificado."
    }
  ],
  "lastModified": "2026-06-16T23:55:38.067",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ovislink:airlive_od-2025hd:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E9EB4F7-936E-4F14-80B9-229F487AE72A"
            },
            {
              "criteria": "cpe:2.3:h:ovislink:airlive_od-2060hd:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "900C1CF9-83BB-416F-9912-FEBDBBA50C45"
            },
            {
              "criteria": "cpe:2.3:h:ovislink:airlive_poe100hd:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "614196B2-B273-467E-8A54-AB2F656E331E"
            },
            {
              "criteria": "cpe:2.3:h:ovislink:airlive_poe200hd:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADD365E4-8F40-4806-BF8B-44C5F9E35398"
            },
            {
              "criteria": "cpe:2.3:h:ovislink:airlive_poe250hd:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "952713D2-C9EF-462B-8012-4CEB70BBA3F5"
            },
            {
              "criteria": "cpe:2.3:h:ovislink:airlive_poe2600hd:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0EB96839-74C9-462F-ABF2-612D54624BC3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}