Main
Vulnerability Database
Exploits
ID:4342 - Exploit for Input validation error in ZoneMinder - CVE-2013-0232
ID:4342 - Exploit for Input validation error in ZoneMinder - CVE-2013-0232
Published: August 11, 2020
Vulnerability identifier: #VU42983
Vulnerability risk: Medium
CVE-ID: CVE-2013-0232
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
ZoneMinder
ZoneMinder
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command parameter in the setDeviceStatusX10 function.
Remediation
Install update from vendor's website.