CVE-2013-2570

CRITICAL 9.8CVE-2013-2570 · Published 29/01/2020 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function of the binary /opt/cgi/view/param, which could let a remove malicious user execute arbitrary code.

References

securityfocus.com/bid/60188 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/84567 · Third Party Advisory
packetstormsecurity.com/files/cve/CVE-2013-2570 · Third Party Advisory
coresecurity.com/advisories/zavio-ip-cameras-multiple-vulnerabilities · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free