CVE-2013-3431

Public PoC / Exploit (1)

Exploit-DBCisco Video Surveillance Operations Manager 6.3.2 - Multiple Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.

Weaknesses (CWE)

CWE-287

Affected Products (21)

cisco · video_surveillance_managervulnerable

References (8)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm

Vendor Advisory

http://www.securityfocus.com/bid/61431

http://www.securitytracker.com/id/1028827

https://exchange.xforce.ibmcloud.com/vulnerabilities/85945

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm

Vendor Advisory

http://www.securityfocus.com/bid/61431

http://www.securitytracker.com/id/1028827

https://exchange.xforce.ibmcloud.com/vulnerabilities/85945