What is the CVSS score of CVE-2013-0600?

CVE-2013-0600 has a CVSS 2.0 base score of 9.3 (Critical). CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.2%.

Websphere Datapower Xc10 Appliance Firmware CVE-2013-0600

CRITICAL

2013-05-09 psirt@us.ibm.com

Authentication Bypass IBM Websphere Datapower Xc10 Appliance Firmware Websphere Datapower Xc10 Appliance

9.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

May 09, 2013 - 12:31 cve.org

CRITICAL 9.3

DescriptionCVE.org

AnalysisAI

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors. Affected products include: Ibm Websphere Datapower Xc10 Appliance Firmware, Ibm Websphere Datapower Xc10 Appliance. Version information: through 2.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Websphere Datapower Xc10 Appliance Firmware

View all

CVE-2014-3060 CRITICAL Act Now

10.0 Oct 02

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administra

CVE-2014-3059 CRITICAL Act Now

10.0 Oct 02

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote

CVE-2013-5403 CRITICAL Act Now

10.0 Sep 27

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to o

CVE-2013-5446 CRITICAL Act Now

10.0 Oct 22

The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which h

CVE-2013-0499 MEDIUM This Month POC

4.3 May 28

Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmwa

CVE-2013-5428 HIGH This Week

7.1 Oct 22

IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows

CVE-2015-1893 MEDIUM This Month

6.8 Apr 06

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrar

CVE-2014-3058 MEDIUM This Month

6.0 Dec 11

Cross-site request forgery (CSRF) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 all

CVE-2014-6138 MEDIUM This Month

4.0 Dec 12

The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended g

CVE-2014-6163 LOW Monitor

3.5 Dec 11

Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows rem

CVE-2016-2870 LOW Monitor

2.7 Jul 02

Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to c

CVE-2015-1970 LOW Monitor

2.1 Aug 03

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2013-2465 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2012-1723 CRITICAL POC

9.8

CVE-2017-10271 HIGH POC

7.5

CVE-2015-1427 CRITICAL POC

9.8

CVE-2025-3248 CRITICAL POC

9.8

CVE-2013-0600 vulnerability details – vuln.today

Back