CVE-2013-10002

Published: May 24, 2022Modified: Nov 21, 2024

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.

Affected (2)

Products: Telecomsoftware: Samwin Agent, Samwin Contact Center

Telecomsoftware

2 products

Samwin Contact Center

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Telecomsoftware Samwin Agent	Version 5.01.19.06
Telecomsoftware Samwin Contact Center	Version 5.1

Related CWEs

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt

Source: cna@vuldb.com

Third Party Advisory

https://vuldb.com/?id.12788

Source: cna@vuldb.com

Third Party Advisory

http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://vuldb.com/?id.12788

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.