CVE-2013-4976 Hardcoded credentials in n/a

Critical 9.8 Published Updated

Attackers can bypass security controls and gain unauthorized access to Hikvision IP cameras using hardcoded credentials.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2013-4976?

CVE-2013-4976 is a critical vulnerability in n/a, published on 27 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials

Weakness: CWE-287

Which versions are affected by CVE-2013-4976?

It affects 1 product.

Products include Hikvision Ds-2cd7153-E Firmware.

How do I fix CVE-2013-4976?

No fix has been published for CVE-2013-4976 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-4976 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-4976 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as GHSA-3rhg-f794-8r8h.

Is CVE-2013-4976 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free