9

CVE-2013-3430

Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37288.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Video Surveillance Manager Version <= 6.3.3
Cisco ≫ Video Surveillance Manager Version 1.1.0
Cisco ≫ Video Surveillance Manager Version 1.2.1
Cisco ≫ Video Surveillance Manager Version 2.0.0
Cisco ≫ Video Surveillance Manager Version 2.1.2
Cisco ≫ Video Surveillance Manager Version 2.1.3
Cisco ≫ Video Surveillance Manager Version 2.1.4
Cisco ≫ Video Surveillance Manager Version 2.1.6
Cisco ≫ Video Surveillance Manager Version 2.1.7
Cisco ≫ Video Surveillance Manager Version 2.3.0
Cisco ≫ Video Surveillance Manager Version 2.3.1
Cisco ≫ Video Surveillance Manager Version 4.0.1
Cisco ≫ Video Surveillance Manager Version 4.2.0
Cisco ≫ Video Surveillance Manager Version 4.2.1
Cisco ≫ Video Surveillance Manager Version 6.3.1
Cisco ≫ Video Surveillance Manager Version 6.3.2
Cisco ≫ Video Surveillance Manager Version 6.3.2 Update mr1
Cisco ≫ Video Surveillance Manager Version 6.3.2 Update mr2
Cisco ≫ Video Surveillance Manager Version 6.3.2 Update mr3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.27% 0.942
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9 10 8.5
AV:N/AC:L/Au:N/C:C/I:P/A:P
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm
Vendor Advisory
http://www.securitytracker.com/id/1028827
http://www.securityfocus.com/bid/61432
https://exchange.xforce.ibmcloud.com/vulnerabilities/85946