CVE-2013-3431

high Cisco
CVSS v3 Base Score
7.8
AV:N/AC:L/Au:N/C:C/I:N/A:N
EPSS Score
4.1%
Exploitation probability in 30 days
Top 11% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
None
Availability
None
Published: July 25, 2013 (4675 days ago)
Last Modified: April 29, 2026
Vendor: Cisco
Source: NVD

Description

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.

CWE

CWE-287

Affected Products

cisco video surveillance manager

References

🔗 tools.cisco.com 🔗 www.securityfocus.com 🔗 www.securitytracker.com 🔗 exchange.xforce.ibmcloud.com 🔗 tools.cisco.com