Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Video_surveillance_manager | Cisco | * | 6.3.3 (including) |
| Video_surveillance_manager | Cisco | 1.1.0 (including) | 1.1.0 (including) |
| Video_surveillance_manager | Cisco | 1.2.1 (including) | 1.2.1 (including) |
| Video_surveillance_manager | Cisco | 2.0.0 (including) | 2.0.0 (including) |
| Video_surveillance_manager | Cisco | 2.1 (including) | 2.1 (including) |
| Video_surveillance_manager | Cisco | 2.1.2 (including) | 2.1.2 (including) |
| Video_surveillance_manager | Cisco | 2.1.3 (including) | 2.1.3 (including) |
| Video_surveillance_manager | Cisco | 2.1.4 (including) | 2.1.4 (including) |
| Video_surveillance_manager | Cisco | 2.1.6 (including) | 2.1.6 (including) |
| Video_surveillance_manager | Cisco | 2.1.7 (including) | 2.1.7 (including) |
| Video_surveillance_manager | Cisco | 2.3.0 (including) | 2.3.0 (including) |
| Video_surveillance_manager | Cisco | 2.3.1 (including) | 2.3.1 (including) |
| Video_surveillance_manager | Cisco | 4.0.1 (including) | 4.0.1 (including) |
| Video_surveillance_manager | Cisco | 4.2.0 (including) | 4.2.0 (including) |
| Video_surveillance_manager | Cisco | 4.2.1 (including) | 4.2.1 (including) |
| Video_surveillance_manager | Cisco | 6.3 (including) | 6.3 (including) |
| Video_surveillance_manager | Cisco | 6.3.1 (including) | 6.3.1 (including) |
| Video_surveillance_manager | Cisco | 6.3.2 (including) | 6.3.2 (including) |
| Video_surveillance_manager | Cisco | 6.3.2-mr1 (including) | 6.3.2-mr1 (including) |
| Video_surveillance_manager | Cisco | 6.3.2-mr2 (including) | 6.3.2-mr2 (including) |
| Video_surveillance_manager | Cisco | 6.3.2-mr3 (including) | 6.3.2-mr3 (including) |