CVE-2013-5535

UnknownEPSS 1.15%

Last modified

CVE-2013-5535 is a vulnerability of currently unknown severity. The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419.. EPSS estimates a 1.15% chance of exploitation in the next 30 days.

Description

The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419.

Metrics

EPSS Probability
1.15%

62.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoVideo Surveillance 4000 Ip CameraAll versions
CiscoVideo Surveillance 4300e Ip CameraAll versions
CiscoVideo Surveillance 4500e Ip CameraAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2013-5535?
The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419.
How severe is CVE-2013-5535?
Severity scoring for CVE-2013-5535 is pending analysis. The EPSS model estimates a 1.15% probability of exploitation in the next 30 days.
How do I fix CVE-2013-5535?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-5535?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST