CVE-2013-10003 - OpenCVE

A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1. This affects the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the database handler. The manipulation leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:L/Au:N/C:P/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Telecomsoftware	Samwin Agent Samwin Contact Center

Configuration 1 [-]

OR	cpe:2.3:a:telecomsoftware:samwin_agent:5.01.19.06:::::::*
	cpe:2.3:a:telecomsoftware:samwin_contact_center:5.1:::::::*

No data.

References

Link	Providers
http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt
https://vuldb.com/?id.12789

History

No history.

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2022-05-24T15:30:29

Updated: 2024-08-06T18:09:17.213Z

Reserved: 2022-05-24T00:00:00

Link: CVE-2013-10003

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2022-05-24T16:15:07.437

Modified: 2022-06-08T16:17:38.517

Link: CVE-2013-10003

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "SAMwin Contact Center Suite", "vendor": "Telecommunication Software", "versions": [{"status": "affected", "version": "5.1"}]}], "credits": [{"lang": "en", "value": "Tobias Ospelt/Max Moser"}], "descriptions": [{"lang": "en", "value": "A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1. This affects the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the database handler. The manipulation leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 SQL Injection", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-05-24T15:30:29", "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt"}, {"tags": ["x_refsource_MISC"], "url": "https://vuldb.com/?id.12789"}], "title": "Telecommunication Software SAMwin Contact Center Suite Database SAMwinLIBVB.dll getCurrentDBVersion sql injection", "x_generator": "vuldb.com", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cna@vuldb.com", "ID": "CVE-2013-10003", "REQUESTER": "cna@vuldb.com", "STATE": "PUBLIC", "TITLE": "Telecommunication Software SAMwin Contact Center Suite Database SAMwinLIBVB.dll getCurrentDBVersion sql injection"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "SAMwin Contact Center Suite", "version": {"version_data": [{"version_value": "5.1"}]}}]}, "vendor_name": "Telecommunication Software"}]}}, "credit": "Tobias Ospelt/Max Moser", "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1. This affects the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the database handler. The manipulation leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component."}]}, "generator": "vuldb.com", "impact": {"cvss": {"baseScore": "6.5", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-89 SQL Injection"}]}]}, "references": {"reference_data": [{"name": "http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt", "refsource": "MISC", "url": "http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt"}, {"name": "https://vuldb.com/?id.12789", "refsource": "MISC", "url": "https://vuldb.com/?id.12789"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T18:09:17.213Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://vuldb.com/?id.12789"}]}]}, "cveMetadata": {"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "assignerShortName": "VulDB", "cveId": "CVE-2013-10003", "datePublished": "2022-05-24T15:30:29", "dateReserved": "2022-05-24T00:00:00", "dateUpdated": "2024-08-06T18:09:17.213Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:telecomsoftware:samwin_agent:5.01.19.06:*:*:*:*:*:*:*", "matchCriteriaId": "277DED3E-2806-4FDC-95ED-FC3166AAE8DE", "vulnerable": true}, {"criteria": "cpe:2.3:a:telecomsoftware:samwin_contact_center:5.1:*:*:*:*:*:*:*", "matchCriteriaId": "E5873B41-8E61-4AFB-842A-903ACF22B5AC", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability classified as critical has been found in Telecommunication Software SAMwin Contact Center Suite 5.1. This affects the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the database handler. The manipulation leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component."}, {"lang": "es", "value": "Se ha encontrado una vulnerabilidad clasificada como cr\u00edtica en Telecommunication Software SAMwin Contact Center Suite versi\u00f3n 5.1. Afecta a la funci\u00f3n getCurrentDBVersion de la biblioteca SAMwinLIBVB.dll del manejador de la base de datos. La manipulaci\u00f3n conlleva a una inyecci\u00f3n sql. La explotaci\u00f3n ha sido divulgada al p\u00fablico y puede ser usado. La actualizaci\u00f3n a versi\u00f3n 6.2 puede abordar este problema. Es recomendado actualizar el componente afectado"}], "id": "CVE-2013-10003", "lastModified": "2022-06-08T16:17:38.517", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 2.5, "source": "cna@vuldb.com", "type": "Secondary"}]}, "published": "2022-05-24T16:15:07.437", "references": [{"source": "cna@vuldb.com", "tags": ["Third Party Advisory"], "url": "http://www.modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory"], "url": "https://vuldb.com/?id.12789"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-89"}], "source": "cna@vuldb.com", "type": "Secondary"}]}