CVE-2013-2567

Name of the Vulnerable Software and Affected Versions: Zavio IP Cameras versions 1.6.03 and earlier

Description: An Authentication Bypass issue exists in the web interface of Zavio IP Cameras due to a hardcoded admin account found in boa.conf. This allows a remote malicious user to obtain sensitive information.

Recommendations: For versions 1.6.03 and earlier, consider disabling the web interface until a patch is available to prevent exploitation of the hardcoded admin account. Restrict access to the boa.conf file to minimize the risk of sensitive information disclosure. Avoid using the default admin account in the affected Zavio IP Cameras until the issue is resolved.