Zavio IP Cameras are prone to multiple vulnerabilities. 1. [CVE-2013-2567] to bypass user web interface authentication using hard-coded credentials. 2. [CVE-2013-2568] to execute arbitrary commands from the administration web interface. This flaw can also be used to obtain all credentials of registered users. 3. [CVE-2013-2569] to access the camera video stream. 4. [CVE-2013-2570] to execute arbitrary commands from the administration web interface (post authentication only). Zavio IP Cameras running firmware version 1.6.03 and below are vulnerable.

• http://www.coresecurity.com/advisories/zavio-IP-cameras-multiple-vulnerabilities
• http://www.securityfocus.com/bid/60188
• http://www.securityfocus.com/bid/60189
• http://www.securityfocus.com/bid/60190
• http://www.securityfocus.com/bid/60191

---

Updated on 2015-03-25