CVE-2013-3625

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere.

Una DLL sin especificar en Baramundi Management Suite 7.5 hasta la versión 8.9 usa una clave de cifrado incrustada en el código, lo que hace más fácil a los atacantes anular mecanismos de protección criptográficos mediante el aprovechamiento del conocimiento de esta clave desde una instalación del producto en otra parte.

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-05-21 CVE Reserved
2013-10-03 CVE Published
2024-09-17 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-255: Credentials Management Errors

CAPEC

References (1)

URL	Tag	Source
http://www.kb.cert.org/vuls/id/392654	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				7.5 Search vendor "Baramundi" for product "Management Suite" and version "7.5"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				7.6 Search vendor "Baramundi" for product "Management Suite" and version "7.6"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.0 Search vendor "Baramundi" for product "Management Suite" and version "8.0"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.1 Search vendor "Baramundi" for product "Management Suite" and version "8.1"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.2 Search vendor "Baramundi" for product "Management Suite" and version "8.2"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.3 Search vendor "Baramundi" for product "Management Suite" and version "8.3"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.5 Search vendor "Baramundi" for product "Management Suite" and version "8.5"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.6 Search vendor "Baramundi" for product "Management Suite" and version "8.6"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.7 Search vendor "Baramundi" for product "Management Suite" and version "8.7"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.8 Search vendor "Baramundi" for product "Management Suite" and version "8.8"		-		Affected
Baramundi Search vendor "Baramundi"		Management Suite Search vendor "Baramundi" for product "Management Suite"				8.9 Search vendor "Baramundi" for product "Management Suite" and version "8.9"		-		Affected