CVE-2013-3430 Information disclosure in n/a

What is CVE-2013-3430?

CVE-2013-3430 is a critical vulnerability in n/a, published on 25 Jul 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37288.

Weakness: CWE-287

Which versions are affected by CVE-2013-3430?

It affects 1 product.

Products include Cisco Video Surveillance Manager.

How do I fix CVE-2013-3430?

No fix has been published for CVE-2013-3430 yet. Limit exposure of the affected software until one is available.

Is CVE-2013-3430 being exploited?

There is no known exploitation of CVE-2013-3430 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in n/a

• CVE-2018-15427 Cisco Video Surveillance Manager Appliance Default Password Vulnerability Critical 9.8
• CVE-2013-3429 Path traversal in n/a High 7.8
• CVE-2013-3431 Missing authorization in n/a High 7.8
• CVE-2019-1717 Cisco Video Surveillance Manager Web-Based Management Interface Information Disclosure Vulnerability High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-2mp7-r7rc-5fh6.