Lucene search

CiscoCVE-2013-3429

HistoryJul 25, 2013 - 3:53 p.m.

CVE-2013-3429

2013-07-2515:53:16

CWE-22

cisco

web.nvd.nist.gov

cisco

video surveillance

vsm

directory traversal

vulnerabilities

bug id

cscsv37163

cve-2013-3429

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

68.2%

JSON

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.

Affected configurations

Nvd

Node

ciscovideo_surveillance_managerRange≤6.3.3

ciscovideo_surveillance_managerMatch1.1.0

ciscovideo_surveillance_managerMatch1.2.1

ciscovideo_surveillance_managerMatch2.0.0

ciscovideo_surveillance_managerMatch2.1

ciscovideo_surveillance_managerMatch2.1.2

ciscovideo_surveillance_managerMatch2.1.3

ciscovideo_surveillance_managerMatch2.1.4

ciscovideo_surveillance_managerMatch2.1.6

ciscovideo_surveillance_managerMatch2.1.7

ciscovideo_surveillance_managerMatch2.3.0

ciscovideo_surveillance_managerMatch2.3.1

ciscovideo_surveillance_managerMatch4.0.1

ciscovideo_surveillance_managerMatch4.2.0

ciscovideo_surveillance_managerMatch4.2.1

ciscovideo_surveillance_managerMatch6.3

ciscovideo_surveillance_managerMatch6.3.1

ciscovideo_surveillance_managerMatch6.3.2

ciscovideo_surveillance_managerMatch6.3.2mr1

ciscovideo_surveillance_managerMatch6.3.2mr2

ciscovideo_surveillance_managerMatch6.3.2mr3

VendorProductVersionCPE
ciscovideo_surveillance_manager4.2.0cpe:/a:cisco:video_surveillance_manager:4.2.0:::
ciscovideo_surveillance_managercpe:/a:cisco:video_surveillance_manager::::
ciscovideo_surveillance_manager4.0.1cpe:/a:cisco:video_surveillance_manager:4.0.1:::
ciscovideo_surveillance_manager6.3.2cpe:/a:cisco:video_surveillance_manager:6.3.2:mr2::
ciscovideo_surveillance_manager6.3.2cpe:/a:cisco:video_surveillance_manager:6.3.2:mr1::
ciscovideo_surveillance_manager6.3.1cpe:/a:cisco:video_surveillance_manager:6.3.1:::
ciscovideo_surveillance_manager2.1cpe:/a:cisco:video_surveillance_manager:2.1:::
ciscovideo_surveillance_manager1.1.0cpe:/a:cisco:video_surveillance_manager:1.1.0:::
ciscovideo_surveillance_manager2.3.0cpe:/a:cisco:video_surveillance_manager:2.3.0:::
ciscovideo_surveillance_manager6.3.2cpe:/a:cisco:video_surveillance_manager:6.3.2:::

Vendor	Product	Version	CPE
cisco	video_surveillance_manager	4.2.0	cpe:/a:cisco:video_surveillance_manager:4.2.0:::
cisco	video_surveillance_manager		cpe:/a:cisco:video_surveillance_manager::::
cisco	video_surveillance_manager	4.0.1	cpe:/a:cisco:video_surveillance_manager:4.0.1:::
cisco	video_surveillance_manager	6.3.2	cpe:/a:cisco:video_surveillance_manager:6.3.2:mr2::
cisco	video_surveillance_manager	6.3.2	cpe:/a:cisco:video_surveillance_manager:6.3.2:mr1::
cisco	video_surveillance_manager	6.3.1	cpe:/a:cisco:video_surveillance_manager:6.3.1:::
cisco	video_surveillance_manager	2.1	cpe:/a:cisco:video_surveillance_manager:2.1:::
cisco	video_surveillance_manager	1.1.0	cpe:/a:cisco:video_surveillance_manager:1.1.0:::
cisco	video_surveillance_manager	2.3.0	cpe:/a:cisco:video_surveillance_manager:2.3.0:::
cisco	video_surveillance_manager	6.3.2	cpe:/a:cisco:video_surveillance_manager:6.3.2:::