« Volver al listado

CVE-2013-6181

Estado: ModificadaBaja (2.1)—

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EMC — Watch4net

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6181",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-12-28T04:53:06.570",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-12/0140.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://packetstormsecurity.com/files/124585/EMC-Watch4net-Information-Disclosure.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/64517",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1029535",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2013-12/0140.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://packetstormsecurity.com/files/124585/EMC-Watch4net-Information-Disclosure.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/64517",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1029535",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges."
    },
    {
      "lang": "es",
      "value": "EMC Watch4Net antes de  6.3 almacena en texto plano las contraseñas del dispositivo encuestados en el repositorio de la instalación, lo que permite a usuarios locales obtener información sensible mediante el aprovechamiento de los privilegios del repositorio."
    }
  ],
  "lastModified": "2026-06-17T00:00:07.377",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:emc:watch4net:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B8929591-6A4C-4235-84CA-00072768BBEB",
              "versionEndIncluding": "6.2"
            },
            {
              "criteria": "cpe:2.3:a:emc:watch4net:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "635876A7-16B1-4A24-AC4F-03A63713DE1D"
            },
            {
              "criteria": "cpe:2.3:a:emc:watch4net:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E60F05B-778D-498B-AED5-29D2ABC821A9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}