CVE-2013-3593

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Baramundi Management Suite 7.5 through 8.9 uses cleartext for (1) client-server communication and (2) data storage, which allows remote attackers to obtain sensitive information by sniffing the network, and allows context-dependent attackers to obtain sensitive information by reading a file.

Baramundi Management Suite 7.5 hasta 8.9 utiliza texto plano para (1) comunicación cliente-servidor y (2) almacenamiento de datos, lo que permite a atacantes remotos obtener información sensible capturando el tráfico de red, y permitiendo a atacantes dependientes de contexto obtener información sensible leyendo un archivo.

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-05-21 CVE Reserved
2013-10-03 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-310: Cryptographic Issues

CAPEC

References (1)

URL	Tag	Source
http://www.kb.cert.org/vuls/id/392654	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				7.5 Search vendor "Baramundi" for product "Management Suite" and version "7.5"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				7.6 Search vendor "Baramundi" for product "Management Suite" and version "7.6"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.0 Search vendor "Baramundi" for product "Management Suite" and version "8.0"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.1 Search vendor "Baramundi" for product "Management Suite" and version "8.1"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.2 Search vendor "Baramundi" for product "Management Suite" and version "8.2"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.3 Search vendor "Baramundi" for product "Management Suite" and version "8.3"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.5 Search vendor "Baramundi" for product "Management Suite" and version "8.5"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.6 Search vendor "Baramundi" for product "Management Suite" and version "8.6"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.7 Search vendor "Baramundi" for product "Management Suite" and version "8.7"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.8 Search vendor "Baramundi" for product "Management Suite" and version "8.8"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.9 Search vendor "Baramundi" for product "Management Suite" and version "8.9"		-		Affected