CVE-2013-1596

MediumCVSS 5.3/10Last modified Jun 16, 2026

Description

An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/59574Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/83945Third Party Advisory, VDB Entry
https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txtExploit, Third Party Advisory
https://packetstormsecurity.com/files/cve/CVE-2013-1596Third Party Advisory, VDB Entry
https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilitiesExploit, Third Party Advisory
http://www.securityfocus.com/bid/59574Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/83945Third Party Advisory, VDB Entry
https://github.com/offensive-security/exploitdb/blob/master/exploits/hardware/webapps/25139.txtExploit, Third Party Advisory
https://packetstormsecurity.com/files/cve/CVE-2013-1596Third Party Advisory, VDB Entry
https://www.coresecurity.com/advisories/vivotek-ip-cameras-multiple-vulnerabilitiesExploit, Third Party Advisory

Timeline

Published: Jan 24, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-15976.5A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let CVE-2013-15988.8A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary CVE-2013-15999.8A Command Injection vulnerability exists in the /var/www/cgi-bin/rtpd.cgi script in D-Link IP Cameras DCS-3411/3430 firmware 1.02, DCS-5605/CVE-2013-16005.3An Authentication Bypass vulnerability exists in upnp/asf-mp4.asf when streaming live video in D-Link TESCO DCS-2121 1.05_TESCO, TESCO DCS-2 CVE-2013-16015.3An Information Disclosure vulnerability exists due to a failure to restrict access on the lums.cgi script when processing a live video strea CVE-2013-16027.5An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5 CVE-2013-16035.3An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-741 CVE-2013-16045.0Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to read arbitrary fi CVE-2013-16057.5Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitrary code via a long f CVE-2013-16067.5Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers t CVE-2013-16079.8Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability CVE-2013-16086.7Directory traversal vulnerability in the Management Console on the Symantec NetBackup (NBU) appliance 2.0.x allows remote attackers to read