VulnerabilityModified

CVE-2013-4633

Huawei Seco Versatile Security Manager (VSM) before V200R002C00SPC300 allows remote authenticated users to gain privileges via a certain change to a group configuration setting.

HIGH 9.0EPSS 1.21%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Huawei Seco Versatile Security Manager (VSM) before V200R002C00SPC300 allows remote authenticated users to gain privileges via a certain change to a group configuration setting.

CVSS 2.0: 9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS: 1.21% probability · 67th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: huawei/seco versatile security manager
Source: cve@mitre.org

References

http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-258449.htmVendor Advisory
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-258449.htmVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.