cve-2013-3429
Vulnerability from cvelistv5
Published
2013-07-25 15:00
Modified
2024-08-06 16:07
Severity ?
EPSS score ?
Summary
Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T16:07:37.984Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "61430", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/61430" }, { "name": "20130724 Multiple Vulnerabilities in the Cisco Video Surveillance Manager", "tags": [ "vendor-advisory", "x_refsource_CISCO", "x_transferred" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm" }, { "name": "cisco-video-cve20133429-dir-trav(85947)", "tags": [ "vdb-entry", "x_refsource_XF", "x_transferred" ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85947" }, { "name": "1028827", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1028827" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2013-07-24T00:00:00", "descriptions": [ { "lang": "en", "value": "Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2017-08-28T12:57:01", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco" }, "references": [ { "name": "61430", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/61430" }, { "name": "20130724 Multiple Vulnerabilities in the Cisco Video Surveillance Manager", "tags": [ "vendor-advisory", "x_refsource_CISCO" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm" }, { "name": "cisco-video-cve20133429-dir-trav(85947)", "tags": [ "vdb-entry", "x_refsource_XF" ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85947" }, { "name": "1028827", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1028827" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "psirt@cisco.com", "ID": "CVE-2013-3429", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "61430", "refsource": "BID", "url": "http://www.securityfocus.com/bid/61430" }, { "name": "20130724 Multiple Vulnerabilities in the Cisco Video Surveillance Manager", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm" }, { "name": "cisco-video-cve20133429-dir-trav(85947)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85947" }, { "name": "1028827", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1028827" } ] } } } }, "cveMetadata": { "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2013-3429", "datePublished": "2013-07-25T15:00:00", "dateReserved": "2013-05-06T00:00:00", "dateUpdated": "2024-08-06T16:07:37.984Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "fkie_nvd": { "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"6.3.3\", \"matchCriteriaId\": \"0BD249B8-2081-483D-A371-E38BA9D895CE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:1.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7C863918-442B-44F5-ABF1-0A209832BB99\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:1.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF417FA9-46DA-4547-9C8C-8D13D152BD57\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:2.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0E292612-353A-425C-B6BB-456769A62C8F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5FE9386E-AE00-4FC4-BBA5-98A02FE530B8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:2.1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0CB2181A-A8D0-40F5-98E7-B56A604756FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:2.1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8CDF94CF-DD9B-4469-BAD0-AC8FDAF6E22B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:2.1.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ABB39563-3E1C-4B00-B7BD-553425881957\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:2.1.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA29A6C0-D895-46D4-BB89-0E5BE3EFDA89\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:2.1.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"10067FC4-429B-462D-B609-4706D69964A3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:2.3.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6693F521-FB27-4025-8782-44706AC180D9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:2.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"242EED01-3AC9-48D8-B860-E56DAD22CE70\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:4.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F597E6F7-C170-4B68-8601-6CEA2D4FE531\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:4.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF1C753D-BA59-458F-92E1-1E1C9E9921AD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:4.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EA7119A6-236F-4C9B-8A9C-19B5E434BB4E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:6.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D0E37235-B44C-4981-9152-4F969F240862\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:6.3.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEB98F7B-29B9-4C4D-AE4C-AFB5D50EBD51\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:6.3.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F46AF1F-C993-43F4-A5EA-5219139FBFD1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:6.3.2:mr1:*:*:*:*:*:*\", \"matchCriteriaId\": \"E4982588-DCE4-4BD6-A0B1-FAB860A52C26\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:6.3.2:mr2:*:*:*:*:*:*\", \"matchCriteriaId\": \"873923F0-05AB-40D1-81A8-7AB02CFFAD56\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:video_surveillance_manager:6.3.2:mr3:*:*:*:*:*:*\", \"matchCriteriaId\": \"F705FECE-EF41-4A2B-93CB-F88039A82DFF\"}]}]}]", "descriptions": "[{\"lang\": \"en\", \"value\": \"Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.\"}, {\"lang\": \"es\", \"value\": \"M\\u00faltiples vulnerabilidades de salto de directorio en Cisco Video Surveillance Manager (VSM) anteriores a v7.0.0 permite que atacantes remotos lean ficheros del sistema mediante URL modifificadas, relacionadas con el paquete Cisco_VSBWT (tambi\\u00e9n conocido como c\\u00f3digo de ejemplo Broadware), tambi\\u00e9n referenciado como Bug ID CSCsv37163.\"}]", "id": "CVE-2013-3429", "lastModified": "2024-11-21T01:53:37.030", "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:C/I:N/A:N\", \"baseScore\": 7.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}", "published": "2013-07-25T15:53:16.203", "references": "[{\"url\": \"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/61430\", \"source\": \"ykramarz@cisco.com\"}, {\"url\": \"http://www.securitytracker.com/id/1028827\", \"source\": \"ykramarz@cisco.com\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/85947\", \"source\": \"ykramarz@cisco.com\"}, {\"url\": \"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/61430\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id/1028827\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/85947\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]", "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Modified", "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-22\"}]}]" }, "nvd": "{\"cve\":{\"id\":\"CVE-2013-3429\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2013-07-25T15:53:16.203\",\"lastModified\":\"2024-11-21T01:53:37.030\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.\"},{\"lang\":\"es\",\"value\":\"M\u00faltiples vulnerabilidades de salto de directorio en Cisco Video Surveillance Manager (VSM) anteriores a v7.0.0 permite que atacantes remotos lean ficheros del sistema mediante URL modifificadas, relacionadas con el paquete Cisco_VSBWT (tambi\u00e9n conocido como c\u00f3digo de ejemplo Broadware), tambi\u00e9n referenciado como Bug ID CSCsv37163.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:N/A:N\",\"baseScore\":7.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"6.3.3\",\"matchCriteriaId\":\"0BD249B8-2081-483D-A371-E38BA9D895CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:1.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C863918-442B-44F5-ABF1-0A209832BB99\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:1.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF417FA9-46DA-4547-9C8C-8D13D152BD57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:2.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E292612-353A-425C-B6BB-456769A62C8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FE9386E-AE00-4FC4-BBA5-98A02FE530B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:2.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CB2181A-A8D0-40F5-98E7-B56A604756FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:2.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CDF94CF-DD9B-4469-BAD0-AC8FDAF6E22B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:2.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABB39563-3E1C-4B00-B7BD-553425881957\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:2.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA29A6C0-D895-46D4-BB89-0E5BE3EFDA89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:2.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10067FC4-429B-462D-B609-4706D69964A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:2.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6693F521-FB27-4025-8782-44706AC180D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:2.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"242EED01-3AC9-48D8-B860-E56DAD22CE70\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:4.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F597E6F7-C170-4B68-8601-6CEA2D4FE531\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:4.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF1C753D-BA59-458F-92E1-1E1C9E9921AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:4.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA7119A6-236F-4C9B-8A9C-19B5E434BB4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0E37235-B44C-4981-9152-4F969F240862\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:6.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEB98F7B-29B9-4C4D-AE4C-AFB5D50EBD51\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:6.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F46AF1F-C993-43F4-A5EA-5219139FBFD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:6.3.2:mr1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4982588-DCE4-4BD6-A0B1-FAB860A52C26\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:6.3.2:mr2:*:*:*:*:*:*\",\"matchCriteriaId\":\"873923F0-05AB-40D1-81A8-7AB02CFFAD56\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:video_surveillance_manager:6.3.2:mr3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F705FECE-EF41-4A2B-93CB-F88039A82DFF\"}]}]}],\"references\":[{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/61430\",\"source\":\"ykramarz@cisco.com\"},{\"url\":\"http://www.securitytracker.com/id/1028827\",\"source\":\"ykramarz@cisco.com\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/85947\",\"source\":\"ykramarz@cisco.com\"},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/61430\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1028827\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/85947\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}" } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.