What’s Vulnerable › Vulnerabilities

CVE-2013-3539

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-10-01 · updated 2026-06-16
• Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.

Affected products

• Ovislink Airlive Wl2600Cam: all versions
• Sony Snc Ch140: all versions
• Sony Snc Ch180: all versions
• Sony Snc Ch240: all versions
• Sony Snc Ch280: all versions
• Sony Snc Dh140: all versions
• Sony Snc Dh140T: all versions
• Sony Snc Dh180: all versions
• Sony Snc Dh240: all versions
• Sony Snc Dh240T: all versions
• Sony Snc Dh280: all versions

References

• http://seclists.org/fulldisclosure/2013/Jun/84
• http://seclists.org/fulldisclosure/2013/Jun/84

Get alerted when CVE-2013-3539 or the next vulnerability affects your stack