Cisco Video Surveillance Manager vulnerabilities

6 CVEs affecting Cisco Video Surveillance Manager, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-44228, published 2021-12-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability, published 2021-12-10. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 100% chance of exploitation in the next 30 days. Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker…
CVE-2013-3429, published 2013-07-25. High severity, CVSS 7.8. EPSS: 10.2% chance of exploitation in the next 30 days. Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka…
CVE-2019-1717, published 2019-05-15. High severity, CVSS 7.5. EPSS: 10.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Video Surveillance Manager could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to…
CVE-2013-3431, published 2013-07-25. High severity, CVSS 7.8. EPSS: 9.3% chance of exploitation in the next 30 days. Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and…
CVE-2013-3430, published 2013-07-25. High severity, CVSS 9.0. EPSS: 8.3% chance of exploitation in the next 30 days. Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka…
CVE-2018-15427, published 2018-10-05. Critical severity, CVSS 9.8. EPSS: 6.8% chance of exploitation in the next 30 days. A vulnerability in Cisco Video Surveillance Manager (VSM) Software running on certain Cisco Connected Safety and Security Unified Computing System (UCS) platforms could allow an unauthenticated,…