VAR-201310-0518
Vulnerability from variot - Updated: 2025-04-11 23:18The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419. Vendors have confirmed this vulnerability Bug ID CSCuj70402 and CSCuj70419 It is released as.By using password information, a third party may be able to view the video feed. This vulnerability stems from the existence of an undisclosed user account that uses a hard-coded password. Attackers can exploit this issue to bypass the authentication mechanism and gain unauthorized access to the device. This issue is being tracked by Cisco Bug ID CSCuj70402 and CSCuj70419
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201310-0518",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "video surveillance 4500e ip camera",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": null
},
{
"model": "video surveillance 4300e ip camera",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": null
},
{
"model": "video surveillance 4000 ip camera",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": null
},
{
"model": "video surveillance 4000 series ip camera",
"scope": "lte",
"trust": 0.8,
"vendor": "cisco",
"version": "3.2.2"
},
{
"model": "video surveillance 4300e ip camera",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "video surveillance 4500e ip camera",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "video surveillance series ip camera",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "4000"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-13795"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004727"
},
{
"db": "CNNVD",
"id": "CNNVD-201310-318"
},
{
"db": "NVD",
"id": "CVE-2013-5535"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:cisco:video_surveillance_4000_ip_camera",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cisco:video_surveillance_4300e_ip_camera",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:cisco:video_surveillance_4500e_ip_camera",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-004727"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco",
"sources": [
{
"db": "BID",
"id": "63013"
}
],
"trust": 0.3
},
"cve": "CVE-2013-5535",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2013-5535",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2013-13795",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-65537",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-5535",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2013-5535",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2013-13795",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201310-318",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-65537",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-13795"
},
{
"db": "VULHUB",
"id": "VHN-65537"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004727"
},
{
"db": "CNNVD",
"id": "CNNVD-201310-318"
},
{
"db": "NVD",
"id": "CVE-2013-5535"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CSCuj70402 and CSCuj70419. Vendors have confirmed this vulnerability Bug ID CSCuj70402 and CSCuj70419 It is released as.By using password information, a third party may be able to view the video feed. This vulnerability stems from the existence of an undisclosed user account that uses a hard-coded password. \nAttackers can exploit this issue to bypass the authentication mechanism and gain unauthorized access to the device. \nThis issue is being tracked by Cisco Bug ID CSCuj70402 and CSCuj70419",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-5535"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004727"
},
{
"db": "CNVD",
"id": "CNVD-2013-13795"
},
{
"db": "BID",
"id": "63013"
},
{
"db": "VULHUB",
"id": "VHN-65537"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-5535",
"trust": 3.4
},
{
"db": "BID",
"id": "63013",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004727",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2013-13795",
"trust": 0.6
},
{
"db": "CISCO",
"id": "20131014 CISCO VIDEO SURVEILLANCE 4000 SERIES IP CAMERA DEFAULT CREDENTIAL VULNERABILITY",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201310-318",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-65537",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-13795"
},
{
"db": "VULHUB",
"id": "VHN-65537"
},
{
"db": "BID",
"id": "63013"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004727"
},
{
"db": "CNNVD",
"id": "CNNVD-201310-318"
},
{
"db": "NVD",
"id": "CVE-2013-5535"
}
]
},
"id": "VAR-201310-0518",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-13795"
},
{
"db": "VULHUB",
"id": "VHN-65537"
}
],
"trust": 0.06999999999999999
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-13795"
}
]
},
"last_update_date": "2025-04-11T23:18:53.227000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Cisco Video Surveillance 4000 Series IP Camera Default Credential Vulnerability",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5535"
},
{
"title": "31256",
"trust": 0.8,
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=31256"
},
{
"title": "Cisco Video Surveillance 4000 Series IP Camera Hardcoded Password Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/40281"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-13795"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004727"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-255",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-65537"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004727"
},
{
"db": "NVD",
"id": "CVE-2013-5535"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.3,
"url": "http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2013-5535"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-5535"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-5535"
},
{
"trust": 0.3,
"url": "http://www.cisco.com"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-13795"
},
{
"db": "VULHUB",
"id": "VHN-65537"
},
{
"db": "BID",
"id": "63013"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004727"
},
{
"db": "CNNVD",
"id": "CNNVD-201310-318"
},
{
"db": "NVD",
"id": "CVE-2013-5535"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-13795"
},
{
"db": "VULHUB",
"id": "VHN-65537"
},
{
"db": "BID",
"id": "63013"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-004727"
},
{
"db": "CNNVD",
"id": "CNNVD-201310-318"
},
{
"db": "NVD",
"id": "CVE-2013-5535"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-10-18T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-13795"
},
{
"date": "2013-10-16T00:00:00",
"db": "VULHUB",
"id": "VHN-65537"
},
{
"date": "2013-10-14T00:00:00",
"db": "BID",
"id": "63013"
},
{
"date": "2013-10-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-004727"
},
{
"date": "2013-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201310-318"
},
{
"date": "2013-10-16T10:52:45.307000",
"db": "NVD",
"id": "CVE-2013-5535"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-10-18T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-13795"
},
{
"date": "2013-10-17T00:00:00",
"db": "VULHUB",
"id": "VHN-65537"
},
{
"date": "2013-10-17T01:05:00",
"db": "BID",
"id": "63013"
},
{
"date": "2013-10-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-004727"
},
{
"date": "2013-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201310-318"
},
{
"date": "2025-04-11T00:51:21.963000",
"db": "NVD",
"id": "CVE-2013-5535"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201310-318"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco Video Surveillance 4000 IP Vulnerability to view video feed on camera analysis page",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-004727"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "trust management",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201310-318"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…