CVE-2013-10002 Telecommunication Software SAMwin Contact Center Suite Credential SAMwinLIBVB.dll getCurrentDBVersion hard-coded credentials
CriticalCVSS 9.1
EPSS 0.81%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| telecomsoftware samwin agent | = 5.01.19.06 | No fix listed |
| telecomsoftware samwin contact center | = 5.1 | No fix listed |
| Telecommunication Software SAMwin Contact Center Suite | = 5.1 | No fix listed |
References
- www.modzero.ch third-party-advisory
- vuldb.com third-party-advisory