« Volver al listado

CVE-2013-3407

Estado: ModificadaMedia (5)—

The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information via a direct request, aka Bug ID CSCug65664.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Server Provisioner

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3407",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-11-18T03:55:05.570",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3407",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=31776",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3407",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=31776",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information via a direct request, aka Bug ID CSCug65664."
    },
    {
      "lang": "es",
      "value": "La interfaz web en Cisco Server Provisioner 6.4.0 Patch 5-1301292331 y anteriores no requiere autenticación para páginas sin especificar, lo que permite a atacantes remotos obtener información sensible a través de peticiones directas, también conocido como Bug ID CSCug65664."
    }
  ],
  "lastModified": "2026-06-16T23:55:02.387",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:server_provisioner:*:patch_5-1301292331:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7277BFB-664B-4FA3-8726-BCA84F4E9511",
              "versionEndIncluding": "6.4.0"
            },
            {
              "criteria": "cpe:2.3:a:cisco:server_provisioner:6.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5692099-00C5-4B44-8CC5-6C1798588163"
            },
            {
              "criteria": "cpe:2.3:a:cisco:server_provisioner:6.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EAFA0793-3507-427D-AD95-2490D57199F8"
            },
            {
              "criteria": "cpe:2.3:a:cisco:server_provisioner:6.4.0:patch_1204040128:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9AFA8006-D6F8-4D46-8406-310BD3385A21"
            },
            {
              "criteria": "cpe:2.3:a:cisco:server_provisioner:6.4.0:patch_2-1112122225:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA23EF0D-25F4-4F37-83A8-12CD721047E5"
            },
            {
              "criteria": "cpe:2.3:a:cisco:server_provisioner:6.4.0:patch_3-1208021049:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B03AC25B-B2F2-4970-82A0-8B93A945D083"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}