cisco video surveillance operations manager vulnerabilities and exploits

(subscribe to this query)

Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) prior to 7.0.0 allow remote malicious users to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.

Cisco Video Surveillance Manager 6.3.2 Cisco Video Surveillance Manager 2.0.0 Cisco Video Surveillance Manager 4.0.1 Cisco Video Surveillance Manager 2.1.2 Cisco Video Surveillance Manager 1.1.0 Cisco Video Surveillance Manager Cisco Video Surveillance Manager 2.1.4 Cisco Video Surveillance Manager 2.1.7 Cisco Video Surveillance Manager 2.3.1 Cisco Video Surveillance Manager 2.3.0 Cisco Video Surveillance Manager 2.1 Cisco Video Surveillance Manager 4.2.0 Cisco Video Surveillance Manager 1.2.1 Cisco Video Surveillance Manager 2.1.3 Cisco Video Surveillance Manager 2.1.6 Cisco Video Surveillance Manager 6.3.1 Cisco Video Surveillance Manager 6.3 Cisco Video Surveillance Manager 4.2.1

1 EDB exploit

Cisco Video Surveillance Manager (VSM) prior to 7.0.0 allows remote malicious users to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37288.

Cisco Video Surveillance Manager 6.3.2 Cisco Video Surveillance Manager 2.0.0 Cisco Video Surveillance Manager 4.0.1 Cisco Video Surveillance Manager 2.1.2 Cisco Video Surveillance Manager 1.1.0 Cisco Video Surveillance Manager Cisco Video Surveillance Manager 2.1.4 Cisco Video Surveillance Manager 2.1.7 Cisco Video Surveillance Manager 2.3.1 Cisco Video Surveillance Manager 2.3.0 Cisco Video Surveillance Manager 2.1 Cisco Video Surveillance Manager 4.2.0 Cisco Video Surveillance Manager 1.2.1 Cisco Video Surveillance Manager 2.1.3 Cisco Video Surveillance Manager 2.1.6 Cisco Video Surveillance Manager 6.3.1 Cisco Video Surveillance Manager 6.3 Cisco Video Surveillance Manager 4.2.1

1 EDB exploit

Cisco Video Surveillance Manager (VSM) prior to 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote malicious users to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka ...

Cisco Video Surveillance Manager 6.3.2 Cisco Video Surveillance Manager 2.0.0 Cisco Video Surveillance Manager 4.0.1 Cisco Video Surveillance Manager 2.1.2 Cisco Video Surveillance Manager 1.1.0 Cisco Video Surveillance Manager Cisco Video Surveillance Manager 2.1.4 Cisco Video Surveillance Manager 2.1.7 Cisco Video Surveillance Manager 2.3.1 Cisco Video Surveillance Manager 2.3.0 Cisco Video Surveillance Manager 2.1 Cisco Video Surveillance Manager 4.2.0 Cisco Video Surveillance Manager 1.2.1 Cisco Video Surveillance Manager 2.1.3 Cisco Video Surveillance Manager 2.1.6 Cisco Video Surveillance Manager 6.3.1 Cisco Video Surveillance Manager 6.3 Cisco Video Surveillance Manager 4.2.1

1 EDB exploit

Open redirect vulnerability in the help page in Cisco Video Surveillance Operations Manager allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCty74490.

Cisco Video Surveillance Operations Manager -

The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remote malicious users to watch video feeds via a crafted URL, aka Bug ID CSCtg72262.

Cisco Video Surveillance Operations Manager -

A vulnerability in the web-based management interface of Cisco Video Surveillance Manager could allow an unauthenticated, remote malicious user to access sensitive information. The vulnerability is due to improper validation of parameters handled by the web-based management inter...

Cisco Video Surveillance Manager 7.21

Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote malicious users to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a client syste...

Cisco Video Surveillance Operations Manager -

A vulnerability in Cisco Video Surveillance Manager (VSM) Software running on certain Cisco Connected Safety and Security Unified Computing System (UCS) platforms could allow an unauthenticated, remote malicious user to log in to an affected system by using the root account, whic...

Cisco Video Surveillance Manager 7.10 Cisco Video Surveillance Manager 7.11 Cisco Video Surveillance Manager 7.11.1

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x up to and including 2.0.64, and 2.2.x up to and including 2.2.19 allows remote malicious users to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as e...

Apache Http Server Suse Linux Enterprise Server 11 Opensuse Opensuse 11.4 Opensuse Opensuse 11.3 Suse Linux Enterprise Software Development Kit 10 Suse Linux Enterprise Server 10 Suse Linux Enterprise Software Development Kit 11 Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 11.04 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 10.04

2 EDB exploits1 Nmap script18 Github repositories3 Articles

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook