PT-2022-7726 · Telecommunication · Samwin Contact Center Suite+1

Max Moser + 1 · Published 2022-05-24 · Updated 2022-06-08 · CVE-2013-10003

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Telecommunication Software SAMwin Contact Center Suite version 5.1

Description A critical issue has been found in the software, affecting the getCurrentDBVersion function in the SAMwinLIBVB.dll library of the database handler. This leads to sql injection. The issue has been publicly disclosed and may be exploited.

Recommendations For Telecommunication Software SAMwin Contact Center Suite version 5.1, upgrade to version 6.2 to address the issue. As a temporary workaround, consider restricting access to the getCurrentDBVersion function in the SAMwinLIBVB.dll library until the upgrade is applied.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2013-10003

Affected Products

Samwin Contact Center Suite

Samwinlibvb.Dll

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-10003 · Security Note
• https://t.me/cibsecurity/43284 · Telegram Post
• https://vuldb.com/?id.12789 · Note
• http://modzero.ch/advisories/MZ-13-06_SAMwin_Architectural_Issues.txt · Note