Hikvision DS-2CD7153-E IP Camera CVE-2013-4975 Privilege Escalation Vulnerability

Bugtraq ID:	61643
Class:	Unknown
CVE:	CVE-2013-4975
Remote:	Yes
Local:	No
Published:	Aug 06 2013 12:00AM
Updated:	Aug 06 2013 12:00AM
Credit:	Alberto Solino from Core Security
Vulnerable:	Hikvision Digital Technology DS-2CD7153-E 4.1.0 b130111
Not Vulnerable:

Hikvision DS-2CD7153-E IP Camera CVE-2013-4975 Privilege Escalation Vulnerability

Hikvision DS-2CD7153-E IP camera is prone to a privilege-escalation vulnerability.

An attacker can exploit this issue to gain elevated privileges on affected devices.

Hikvision DS-2CD7153-E IP camera running firmware 4.1.0 b130111 is vulnerable; others may also be affected.

Hikvision DS-2CD7153-E IP Camera CVE-2013-4975 Privilege Escalation Vulnerability

An attacker can exploit this issue using readily available tools.

The following example data is available:

• /data/vulnerabilities/exploits/61643.txt

Hikvision DS-2CD7153-E IP Camera CVE-2013-4975 Privilege Escalation Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Hikvision DS-2CD7153-E IP Camera CVE-2013-4975 Privilege Escalation Vulnerability

References:

• Hikvision DS-2CD7153-E IP Camera Homepage (Hikvision Digital Technology)
  
• Hikvision IP Cameras Multiple Vulnerabilities (CORE)