ID

VAR-201307-0575


TITLE

Asante Voyager I and II Network Camera Security Bypass Vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2013-09697

DESCRIPTION

Asante Voyager I and Voyager II are network cameras from Asante, USA. A security bypass vulnerability exists in Asante Voyager I and Voyager II Network Cameras, which stems from the program's use of hard-coded credentials. An attacker could use this vulnerability to gain administrator access to the affected device. There are vulnerabilities in the firmware version 2.08 running Voyager I and Voyager II Network Cameras. Other versions may also be affected

Trust: 1.35

sources: CNVD: CNVD-2013-09697 // CNNVD: CNNVD-201307-261 // BID: 61119

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2013-09697

AFFECTED PRODUCTS

vendor:asantemodel:voyager i and ii network camerasscope:eqversion:2.08

Trust: 0.6

sources: CNVD: CNVD-2013-09697

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2013-09697
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2013-09697
severity: MEDIUM
baseScore: 6.0
vectorString: AV:N/AC:M/AU:S/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 6.8
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2013-09697

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201307-261

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-201307-261

EXTERNAL IDS

db:BIDid:61119

Trust: 1.5

db:CNVDid:CNVD-2013-09697

Trust: 0.6

db:CNNVDid:CNNVD-201307-261

Trust: 0.6

sources: CNVD: CNVD-2013-09697 // BID: 61119 // CNNVD: CNNVD-201307-261

REFERENCES

url:http://www.securityfocus.com/bid/61119

Trust: 1.2

sources: CNVD: CNVD-2013-09697 // CNNVD: CNNVD-201307-261

CREDITS

Roberto Paleari and Alessandro Di Pinto

Trust: 0.9

sources: BID: 61119 // CNNVD: CNNVD-201307-261

SOURCES

db:CNVDid:CNVD-2013-09697
db:BIDid:61119
db:CNNVDid:CNNVD-201307-261

LAST UPDATE DATE

2022-05-17T02:01:14.107000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2013-09697date:2013-07-19T00:00:00
db:BIDid:61119date:2013-07-11T00:00:00
db:CNNVDid:CNNVD-201307-261date:2013-07-17T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2013-09697date:2013-07-19T00:00:00
db:BIDid:61119date:2013-07-11T00:00:00
db:CNNVDid:CNNVD-201307-261date:2013-07-17T00:00:00