CVE-2013-10002

MEDIUM

Telecomsoftware SAMwin Contact Center Suite 5.1 - Use of Hard-coded Credentials in SAMwinLIBVB.dll

Title source: llm
STIX 2.1

Description

A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://vuldb.com/?id.12788

Scores

CVSS v3 6.5
EPSS 0.0074
EPSS Percentile 49.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-798
Status published
Products (2)
telecomsoftware/samwin_agent 5.01.19.06
telecomsoftware/samwin_contact_center 5.1
Published May 24, 2022
Tracked Since Feb 18, 2026