NetSight
IP …
high7.8Public exploit code

CVE-2013-3431

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtai…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.

Affected products

VendorProductAffected versions
CiscoVideo Surveillance Manager
through 6.3.3
Versions 1.1.0, 1.2.1, 2.0.0, 2.1, 2.1.2

Weakness classification

CWE-287

References