CVEvulnerability

CVE-2013-3429

7.8 HIGH Published 2013-07-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-07-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-22

Description

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.

Affected configurations

• cisco video surveillance manager (<= 6.3.3) • cisco video surveillance manager 1.1.0 • cisco video surveillance manager 1.2.1 • cisco video surveillance manager 2.0.0 • cisco video surveillance manager 2.1 • cisco video surveillance manager 2.1.2 • cisco video surveillance manager 2.1.3 • cisco video surveillance manager 2.1.4 • cisco video surveillance manager 2.1.6 • cisco video surveillance manager 2.1.7 • cisco video surveillance manager 2.3.0 • cisco video surveillance manager 2.3.1 • cisco video surveillance manager 4.0.1 • cisco video surveillance manager 4.2.0 • cisco video surveillance manager 4.2.1 • cisco video surveillance manager 6.3 • cisco video surveillance manager 6.3.1 • cisco video surveillance manager 6.3.2

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References