What’s Vulnerable › Vulnerabilities

CVE-2013-3540

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-10-04 · updated 2026-06-16
• Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.

Affected products

• Ovislink Airlive Od-2025Hd: all versions
• Ovislink Airlive Od-2060Hd: all versions
• Ovislink Airlive Poe100Hd: all versions
• Ovislink Airlive Poe200Hd: all versions
• Ovislink Airlive Poe250Hd: all versions
• Ovislink Airlive Poe2600Hd: all versions

References

• http://seclists.org/fulldisclosure/2013/Jun/84
• http://seclists.org/fulldisclosure/2013/Jun/84

Get alerted when CVE-2013-3540 or the next vulnerability affects your stack