VULNERABILITY INTELLIGENCE
CVE-2013-3431
CVSS score7.8 HIGH
EPSS probability9.26%
CISA KEVNot currently listed
Published2013-07-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N
Description
Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.
Weakness classification
- CWE-287: Improper Authentication