NetSight
high7.8Public exploit code

CVE-2013-3429

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted U…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.

Affected products

VendorProductAffected versions
CiscoVideo Surveillance Manager
through 6.3.3
Versions 1.1.0, 1.2.1, 2.0.0, 2.1, 2.1.2

Weakness classification

References