← Vulnerability feed

Vulnerability record · CVE-2013-3431 · published 25 July 2013

CVE-2013-3431: Cisco video surveillance manager improper authentication vulnerability

Cisco · Video Surveillance Manager

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.

7.8 CVSS 2.0 High EPSS 9.3% · top 4.8% CWE-287 · Improper authentication
7.8CVSS 2.0 base score
9.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.

AV:N/AC:L/Au:N/C:C/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm Vendor Advisory
http://www.securityfocus.com/bid/61431
http://www.securitytracker.com/id/1028827
https://exchange.xforce.ibmcloud.com/vulnerabilities/85945
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130724-vsm Vendor Advisory
http://www.securityfocus.com/bid/61431
http://www.securitytracker.com/id/1028827
https://exchange.xforce.ibmcloud.com/vulnerabilities/85945

Track CVE-2013-3431 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2021-44228Apache Log4j2 JNDI lookup remote code executionApache Log4j2 versions 2.0-beta9 through 2.15.0 (excluding 2.12.2, 2.12.3, and 2.3.1) do not protect against attacker-controlled LDAP and other JNDI …KEVEPSS 100%analysed9.8CVE-2018-15427Cisco video surveillance manager hard-coded credentials vulnerabilityA vulnerability in Cisco Video Surveillance Manager (VSM) Software running on certain Cisco Connected Safety and Security Unified Computing System (U…EPSS 6.8%9.0CVE-2013-3430Cisco video surveillance manager improper authentication vulnerabilityCisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspe…EPSS 8.3%7.8CVE-2013-3429Cisco video surveillance manager path traversal vulnerabilityMultiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a…EPSS 10%7.5CVE-2019-1717Cisco video surveillance manager path traversal vulnerabilityA vulnerability in the web-based management interface of Cisco Video Surveillance Manager could allow an unauthenticated, remote attacker to access s…EPSS 10%7.5CVE-2026-42018JFrog Artifactory improper authentication leaks anonymous tokenJFrog Artifactory can return an internal anonymous-user token to an unauthenticated caller even when anonymous access is disabled. Because the token …KEVEPSS 9.8%analysed9.8CVE-2026-82329JFrog Artifactory improper authentication allows admin takeoverJFrog Artifactory contains an improper authentication weakness (CWE-287) that, under default configuration, may let an unauthenticated attacker with …KEVEPSS 14%analysed8.8CVE-2026-59822LiteLLM MCP endpoint auth bypass via OAuth2 passthrough fallbackLiteLLM's MCP Streamable HTTP endpoint, prior to 1.84.0, let an unauthenticated attacker send a fabricated Authorization header that triggered an OAu…KEVEPSS 0.84%analysed

Source: NIST National Vulnerability Database (record CVE-2013-3431), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.