CVE-2013-3429: Path Traversal
Published Jul 25, 2013
·Updated
Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the CiscoVSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.
Affected Software
21 affected components
Cisco Video Surveillance Manager<=6.3.3
Cisco Video Surveillance Manager=1.1.0
Cisco Video Surveillance Manager=1.2.1
Cisco Video Surveillance Manager=2.0.0
Cisco Video Surveillance Manager=2.1
Cisco Video Surveillance Manager=2.1.2
Cisco Video Surveillance Manager=2.1.3
Cisco Video Surveillance Manager=2.1.4
Cisco Video Surveillance Manager=2.1.6
Cisco Video Surveillance Manager=2.1.7
Cisco Video Surveillance Manager=2.3.0
Cisco Video Surveillance Manager=2.3.1
Cisco Video Surveillance Manager=4.0.1
Cisco Video Surveillance Manager=4.2.0
Cisco Video Surveillance Manager=4.2.1
Cisco Video Surveillance Manager=6.3
Cisco Video Surveillance Manager=6.3.1
Cisco Video Surveillance Manager=6.3.2
Cisco Video Surveillance Manager=6.3.2-mr1
Cisco Video Surveillance Manager=6.3.2-mr2
Cisco Video Surveillance Manager=6.3.2-mr3
Event History
Jul 25, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3429?
CVE-2013-3429 is considered to have a medium severity rating due to its potential for file reading vulnerabilities.
2
How do I fix CVE-2013-3429?
To fix CVE-2013-3429, upgrade Cisco Video Surveillance Manager to version 7.0.0 or later.
3
What systems are affected by CVE-2013-3429?
CVE-2013-3429 affects various versions of Cisco Video Surveillance Manager prior to 7.0.0.
4
Can CVE-2013-3429 be exploited remotely?
Yes, CVE-2013-3429 allows remote attackers to exploit the vulnerability via crafted URLs.
5
What are the potential impacts of CVE-2013-3429?
The potential impacts of CVE-2013-3429 include unauthorized access to sensitive system files.