CVE-2013-3431

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.

CVSS v2.0

7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N

EPSS

9.26% chance of exploitation in the next 30 days, 95th percentile

Published

2013-07-25

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24786

References

• CVE Record
• NVD entry

Related

• CVE-2013-3430
• CVE-2013-3482
• CVE-2013-3429
• CVE-2013-3502
• CVE-2013-3365
• CVE-2013-3514