CVE-2013-3540 Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows....
MediumCVSS 6.8
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ovislink airlive od-2025hd | All versions | No fix listed |
| ovislink airlive od-2060hd | All versions | No fix listed |
| ovislink airlive poe100hd | All versions | No fix listed |
| ovislink airlive poe200hd | All versions | No fix listed |
| ovislink airlive poe250hd | All versions | No fix listed |
| ovislink airlive poe2600hd | All versions | No fix listed |
References
- 20130612 Security Analysis of IP video surveillance cameras exploit mailing-list