Unauthenticated Access to Cisco Video Surveillance Manager (VSM) Monitoring Pages

Unauthenticated Access to Cisco Video Surveillance Manager (VSM) Monitoring Pages

CVE-2013-3431 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:N/A:N

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.

Learn more about our Web Application Penetration Testing UK.