PT-2022-7727 · Telecommunication · Samwin Contact Center Suite+1

Max Moser + 1 · Published 2022-05-24 · Updated 2022-06-08 · CVE-2013-10004

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Telecommunication Software SAMwin Contact Center Suite version 5.1

Description A critical issue was found in the Password Handler component, specifically affecting the passwordScramble function in the SAMwinLIBVB.dll library. This is due to an incorrect implementation of a hashing function, leading to predictable authentication possibilities.

Recommendations For Telecommunication Software SAMwin Contact Center Suite version 5.1, upgrade to version 6.2 to address the issue. It is recommended to upgrade the affected Password Handler component.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Improper Authentication

Weakness Enumeration

CWE-307

CWE-287

Related Identifiers

CVE-2013-10004

Affected Products

Samwin Contact Center Suite

Samwinlibvb.Dll

References · 4

• 🔥 https://vuldb.com/?id.12790 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-10004 · Security Note
• https://t.me/cibsecurity/43281 · Telegram Post
• http://modzero.ch/advisories/MZ-13-07_SAMwin_Collisions.txt · Note