Description (CNA)
A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function of the binary /opt/cgi/view/param, which could let a remove malicious user execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/60188
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84567
- https://www.coresecurity.com/advisories/zavio-ip-cameras-multiple-vulnerabilities
- https://packetstormsecurity.com/files/cve/CVE-2013-2570
ADP enrichment
No English description supplied.