VULNERABILITY INTELLIGENCE

CVE-2013-3564

CVSS score5.3 MEDIUM
EPSS probability1.11%
CISA KEVNot currently listed
Published2020-02-06
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references