VULNERABILITY INTELLIGENCE
CVE-2013-10004
CVSS score6.5 MEDIUM
EPSS probability0.98%
CISA KEVNot currently listed
Published2022-05-24
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect implementation of a hashing function leads to predictable authentication possibilities. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.
Weakness classification
- cna@vuldb.com: CWE-287
- nvd@nist.gov: CWE-307
Primary references
- cna@vuldb.com — Third Party Advisory
- cna@vuldb.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory