CVE-2013-6207

2014-03-1113:01:04

[email protected]

web.nvd.nist.gov

CVSS2

9.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.216

Percentile

96.5%

JSON

Unspecified vulnerability in the loadFileContents function in the SOAP implementation in HP SiteScope 10.1x, 11.1x, and 11.21 allows remote attackers to read arbitrary files or cause a denial of service via unknown vectors, aka ZDI-CAN-2084.

Affected configurations

Nvd

Node

hpsitescopeMatch10.10

hpsitescopeMatch10.11

hpsitescopeMatch10.12

hpsitescopeMatch10.13

hpsitescopeMatch11.10

hpsitescopeMatch11.11

hpsitescopeMatch11.12

hpsitescopeMatch11.21

VendorProductVersionCPE
hpsitescope10.10cpe:2.3:a:hp:sitescope:10.10:*:*:*:*:*:*:*
hpsitescope10.11cpe:2.3:a:hp:sitescope:10.11:*:*:*:*:*:*:*
hpsitescope10.12cpe:2.3:a:hp:sitescope:10.12:*:*:*:*:*:*:*
hpsitescope10.13cpe:2.3:a:hp:sitescope:10.13:*:*:*:*:*:*:*
hpsitescope11.10cpe:2.3:a:hp:sitescope:11.10:*:*:*:*:*:*:*
hpsitescope11.11cpe:2.3:a:hp:sitescope:11.11:*:*:*:*:*:*:*
hpsitescope11.12cpe:2.3:a:hp:sitescope:11.12:*:*:*:*:*:*:*
hpsitescope11.21cpe:2.3:a:hp:sitescope:11.21:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	sitescope	10.10	cpe:2.3:a:hp:sitescope:10.10:::::::*
hp	sitescope	10.11	cpe:2.3:a:hp:sitescope:10.11:::::::*
hp	sitescope	10.12	cpe:2.3:a:hp:sitescope:10.12:::::::*
hp	sitescope	10.13	cpe:2.3:a:hp:sitescope:10.13:::::::*
hp	sitescope	11.10	cpe:2.3:a:hp:sitescope:11.10:::::::*
hp	sitescope	11.11	cpe:2.3:a:hp:sitescope:11.11:::::::*
hp	sitescope	11.12	cpe:2.3:a:hp:sitescope:11.12:::::::*
hp	sitescope	11.21	cpe:2.3:a:hp:sitescope:11.21:::::::*