CVE-2013-3431

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-07-25 · updated 2026-06-16
Weakness: CWE-287

Description

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.

Affected products

Cisco Video Surveillance Manager: through 6.3.3; 1.1.0, 1.2.1, 2.0.0, 2.1, 2.1.2, 2.1.3 (+14)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm
http://www.securityfocus.com/bid/61431
http://www.securitytracker.com/id/1028827
https://exchange.xforce.ibmcloud.com/vulnerabilities/85945
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm
http://www.securityfocus.com/bid/61431
http://www.securitytracker.com/id/1028827
https://exchange.xforce.ibmcloud.com/vulnerabilities/85945

Get alerted when CVE-2013-3431 or the next vulnerability affects your stack