CVE-2013-7487 On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000.
CriticalCVSS 9.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| swann dvr04b firmware | All versions | No fix listed |
| swann dvr08b firmware | All versions | No fix listed |
| swann dvr-16cif firmware | All versions | No fix listed |
| swann dvr16b firmware | All versions | No fix listed |
References
- console-cowboys.blogspot.com exploit third-party-advisory