3 results (0.032 seconds)

CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 1

CVE-2013-3431 – Cisco Video Surveillance Operations Manager 6.3.2 - Multiple Vulnerabilities

https://notcve.org/view.php?id=CVE-2013-3431

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169. Cisco Video Surveillance Manager (VSM) anteriores a v7.0.0 no requiere autenticación para acceder a las páginas de monitorización, permitiendo que atacantes remotos obtengan configuración sensible, archivos, e información de los log mediante vectores no especificados, relacionados con el paquete Cisco_VSBWT (también conocido como código de ejemplo Broadware), también referenciado como Bug ID CSCsv40169. • https://www.exploit-db.com/exploits/24786 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm http://www.securityfocus.com/bid/61431 http://www.securitytracker.com/id/1028827 https://exchange.xforce.ibmcloud.com/vulnerabilities/85945 • CWE-287: Improper Authentication •

CVSS: 9.0EPSS: 0%CPEs: 21EXPL: 1

CVE-2013-3430 – Cisco Video Surveillance Operations Manager 6.3.2 - Multiple Vulnerabilities

https://notcve.org/view.php?id=CVE-2013-3430

Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37288. Cisco Video Surveillance Manager (VSM) anteriores a v7.0.0 permite que atacantes remotos obtengan configuración sensible, archivos e información de log mediante vectores no especificados, relacionados con el paquete Cisco_VSBWT (también conocido como código de ejemplo Broadware), también referenciado como Bug ID CSCsv37288. • https://www.exploit-db.com/exploits/24786 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm http://www.securityfocus.com/bid/61432 http://www.securitytracker.com/id/1028827 https://exchange.xforce.ibmcloud.com/vulnerabilities/85946 • CWE-287: Improper Authentication •

CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 1

CVE-2013-3429 – Cisco Video Surveillance Operations Manager 6.3.2 - Multiple Vulnerabilities

https://notcve.org/view.php?id=CVE-2013-3429

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163. Múltiples vulnerabilidades de salto de directorio en Cisco Video Surveillance Manager (VSM) anteriores a v7.0.0 permite que atacantes remotos lean ficheros del sistema mediante URL modifificadas, relacionadas con el paquete Cisco_VSBWT (también conocido como código de ejemplo Broadware), también referenciado como Bug ID CSCsv37163. • https://www.exploit-db.com/exploits/24786 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm http://www.securityfocus.com/bid/61430 http://www.securitytracker.com/id/1028827 https://exchange.xforce.ibmcloud.com/vulnerabilities/85947 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •