CVEvulnerability
CVE-2013-3312
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-11-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change (1) passwords or (2) firewall configuration, as demonstrated by a request to set_users.cgi.
Affected configurations
• loftek nexus 543 firmware
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/27878 Exploit, Third Party Advisory, VDB Entry
- http://www.tripwire.com/state-of-security/vulnerability-management/vulnerability-who-is-watching-your-ip-camera Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/27878 Exploit, Third Party Advisory, VDB Entry