Back to Database
Status published
Medium
CVE-2013-7382
VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and...
Vulnerability Description
VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) VDCL users, which makes it easier for remote attackers to obtain access.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-7382
Credits & Attribution
No credits recorded in the NVD database.
References
More from vicidial
View All →CVE-2021-46557
Vicidial 2.14-783a was discovered to contain a cross-site scripting (XSS)...
Medium
5.4
CVE-2021-35377
Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c...
Medium
6.1
CVE-2013-4468
VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and...
Medium
6.5
CVE-2013-4467
Multiple SQL injection vulnerabilities in the agent interface (agc/) in...
Medium
6.5
CVE-2009-2234
Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center...
High
7.5
Affected Vendor
vicidial
View all reports →Affected Software
vicidial
Vulnerable Versions:
0, 2.7
Timeline
Official Publish:
May 17th, 2014
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.