CVE-2013-5558 — HIGH (10.0)

Vulnerability Description

The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access via the administrative interface, aka Bug ID CSCuj17238.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Cisco	Telepresence Vx Clinical Assistant	1.2

Related Weaknesses (CWE)

CWE-255

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20Vendor Advisory

FAQ

What is CVE-2013-5558?

CVE-2013-5558 is a vulnerability with a CVSS score of 10.0 (HIGH). The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access ...

How severe is CVE-2013-5558?

CVE-2013-5558 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-5558?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Telepresence Vx Clinical Assistant.