CVE-2013-3417

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-09-30 · updated 2026-06-16
Weakness: CWE-287

Description

The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remote attackers to watch video feeds via a crafted URL, aka Bug ID CSCtg72262.

Affected products

Cisco Video Surveillance Operations Manager: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3417
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3417

Get alerted when CVE-2013-3417 or the next vulnerability affects your stack