Lucene search

CiscoCVE-2013-3431

HistoryJul 25, 2013 - 3:53 p.m.

CVE-2013-3431

2013-07-2515:53:16

CWE-287

cisco

web.nvd.nist.gov

cisco

vsm

security

authentication

remote access

vulnerability

cve-2013-3431

nvd

cscsv40169

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

70.6%

JSON

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.

Affected configurations

Nvd

Node

ciscovideo_surveillance_managerRange≤6.3.3

ciscovideo_surveillance_managerMatch1.1.0

ciscovideo_surveillance_managerMatch1.2.1

ciscovideo_surveillance_managerMatch2.0.0

ciscovideo_surveillance_managerMatch2.1

ciscovideo_surveillance_managerMatch2.1.2

ciscovideo_surveillance_managerMatch2.1.3

ciscovideo_surveillance_managerMatch2.1.4

ciscovideo_surveillance_managerMatch2.1.6

ciscovideo_surveillance_managerMatch2.1.7

ciscovideo_surveillance_managerMatch2.3.0

ciscovideo_surveillance_managerMatch2.3.1

ciscovideo_surveillance_managerMatch4.0.1

ciscovideo_surveillance_managerMatch4.2.0

ciscovideo_surveillance_managerMatch4.2.1

ciscovideo_surveillance_managerMatch6.3

ciscovideo_surveillance_managerMatch6.3.1

ciscovideo_surveillance_managerMatch6.3.2

ciscovideo_surveillance_managerMatch6.3.2mr1

ciscovideo_surveillance_managerMatch6.3.2mr2

ciscovideo_surveillance_managerMatch6.3.2mr3

VendorProductVersionCPE
ciscovideo_surveillance_manager4.2.0cpe:/a:cisco:video_surveillance_manager:4.2.0:::
ciscovideo_surveillance_managercpe:/a:cisco:video_surveillance_manager::::
ciscovideo_surveillance_manager4.0.1cpe:/a:cisco:video_surveillance_manager:4.0.1:::
ciscovideo_surveillance_manager6.3.2cpe:/a:cisco:video_surveillance_manager:6.3.2:mr2::
ciscovideo_surveillance_manager6.3.2cpe:/a:cisco:video_surveillance_manager:6.3.2:mr1::
ciscovideo_surveillance_manager6.3.1cpe:/a:cisco:video_surveillance_manager:6.3.1:::
ciscovideo_surveillance_manager2.1cpe:/a:cisco:video_surveillance_manager:2.1:::
ciscovideo_surveillance_manager1.1.0cpe:/a:cisco:video_surveillance_manager:1.1.0:::
ciscovideo_surveillance_manager2.3.0cpe:/a:cisco:video_surveillance_manager:2.3.0:::
ciscovideo_surveillance_manager6.3.2cpe:/a:cisco:video_surveillance_manager:6.3.2:::

Vendor	Product	Version	CPE
cisco	video_surveillance_manager	4.2.0	cpe:/a:cisco:video_surveillance_manager:4.2.0:::
cisco	video_surveillance_manager		cpe:/a:cisco:video_surveillance_manager::::
cisco	video_surveillance_manager	4.0.1	cpe:/a:cisco:video_surveillance_manager:4.0.1:::
cisco	video_surveillance_manager	6.3.2	cpe:/a:cisco:video_surveillance_manager:6.3.2:mr2::
cisco	video_surveillance_manager	6.3.2	cpe:/a:cisco:video_surveillance_manager:6.3.2:mr1::
cisco	video_surveillance_manager	6.3.1	cpe:/a:cisco:video_surveillance_manager:6.3.1:::
cisco	video_surveillance_manager	2.1	cpe:/a:cisco:video_surveillance_manager:2.1:::
cisco	video_surveillance_manager	1.1.0	cpe:/a:cisco:video_surveillance_manager:1.1.0:::
cisco	video_surveillance_manager	2.3.0	cpe:/a:cisco:video_surveillance_manager:2.3.0:::
cisco	video_surveillance_manager	6.3.2	cpe:/a:cisco:video_surveillance_manager:6.3.2:::