CVE-2013-3540: Ovislink Airlive Od-2025hd

Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in cgi-bin/admin/usrgrp.cgi in AirLive POE2600HD, POE250HD, POE200HD, OD-325HD, OD-2025HD, OD-2060HD, POE100HD, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.

Affected products

• Ovislink Airlive Od-2025hd: affected versions not specified
• Ovislink Airlive Od-2060hd: affected versions not specified
• Ovislink Airlive POE100HD: affected versions not specified
• Ovislink Airlive POE200HD: affected versions not specified
• Ovislink Airlive POE250HD: affected versions not specified
• Ovislink Airlive POE2600HD: affected versions not specified

Published 2013-10-04. Last modified 2026-06-16.