RULE(RULE ID:310916)

Rule General Information
Release Date: 2014-06-25
Rule Name: WEB-OTHER Zavio IP Camera Firmware 1.6.03 Authentication Bypass -1 (CVE-2013-2567)
Severity:
CVE ID:
Rule Protection Details
Description: By default, Zavio F3105 and F312A IP cameras install with hardcoded default user credentials. The manufacture account has a password of erutcafunam, which is publicly known and documented.
Impact: Privilege escalation
Affected OS: Network Device
Reference: CVE-2013-2567
OSVDB:93711
Solutions
Update vendor's patch.