CVE-2013-6838

Severity CVSS v4.0:

Pending analysis

Type:

CWE-310 Cryptographic Issues

Publication date:

28/01/2014

Last modified:

11/04/2025

Description

An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.3 (rel903), when using OpenVZ and fallback customization, uses the same SSH private key across different customers&#39; installations, which allows remote attackers to gain privileges by leveraging knowledge of this key.

Impact

Vector 2.0

AV:N/AC:L/Au:N/C:C/I:C/A:C CVSS v2.0 Severity and Metrics:

Base Score: 10.00 HIGH
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Complete
Integrity (I): Complete
Availability (A): Complete