Authentication flaw

2013-07-2515:53:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.003 Low

EPSS

Percentile

69.9%

JSON

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.

CPENameOperatorVersion
video_surveillance_managereq6.3.2
video_surveillance_managereq2.0.0
video_surveillance_managereq4.0.1
video_surveillance_managereq2.1.2
video_surveillance_managereq1.1.0
video_surveillance_managerle6.3.3
video_surveillance_managereq2.1.4
video_surveillance_managereq2.1.7
video_surveillance_managereq2.3.1
video_surveillance_managereq2.3.0

Name	Operator	Version
video_surveillance_manager	eq	6.3.2
video_surveillance_manager	eq	2.0.0
video_surveillance_manager	eq	4.0.1
video_surveillance_manager	eq	2.1.2
video_surveillance_manager	eq	1.1.0
video_surveillance_manager	le	6.3.3
video_surveillance_manager	eq	2.1.4
video_surveillance_manager	eq	2.1.7
video_surveillance_manager	eq	2.3.1
video_surveillance_manager	eq	2.3.0