CVE-2013-2567: Zavio f3105 Firmware

High severity, CVSS 7.5. EPSS: 14.6% chance of exploitation in the next 30 days.

An Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1.6.03 due to a hardcoded admin account found in boa.conf, which lets a remote malicious user obtain sensitive information.

Affected products

• Zavio f3105 Firmware: up to and including 1.6.03
• Zavio f312a Firmware: up to and including 1.6.03

Published 2020-01-29. Last modified 2026-06-16.