20130724 Multiple Vulnerabilities in the Cisco Video Surveillance ManagerVendor advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm CVE-2013-3431
Cisco Video Surveillance Operations Manager 6.3.2 - Multiple Vulnerabilities
Record summary
CVE-2013-3431 has a selected CVSS score of 7.8; EIP currently links 1 catalogued exploit.
Description
Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCisco Video Surveillance Operations Manager 6.3.2 - Multiple VulnerabilitiesExploitDB exploitby BassemNot analyzed1 file
References
561431vdb entry
http://www.securityfocus.com/bid/61431 1028827vdb entry
http://www.securitytracker.com/id/1028827 cisco-video-cve20133431-info-disc(85945)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/85945 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2013-3431