Read the docs
TI-2013-05201 Aliases CVE-2013-6181GHSA-q6qr-hxg8-fhhp

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation…

Priority LOW 12CWE-310Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

EMC Watch4Net before 6.3 stores cleartext polled-device passwords in the installation repository, which allows local users to obtain sensitive information by leveraging repository privileges.

Why it matters now

EPSS 0.00533 45th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:emc:watch4net:*:*:*:*:*:*:*:*up to 6.2VulnerableEMC
cpe:2.3:a:emc:watch4net:6.0:*:*:*:*:*:*:*6.0VulnerableEMC
cpe:2.3:a:emc:watch4net:6.1:*:*:*:*:*:*:*6.1VulnerableEMC
  • cpe:2.3:a:emc:watch4net:*:*:*:*:*:*:*:* Versions up to 6.2 Vulnerable ·EMC
  • cpe:2.3:a:emc:watch4net:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·EMC
  • cpe:2.3:a:emc:watch4net:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·EMC

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-6181
  2. 2026-10-03 Alias added: GHSA-q6qr-hxg8-fhhp

References

Other 2

  • TI-2015-00476 Unrestricted file upload vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR… CVSS 2.0MEDIUM 6.5
  • TI-2015-00475 EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote… CVSS 2.0MEDIUM 5.0
  • TI-2015-00477 Directory traversal vulnerability in EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM… CVSS 2.0MEDIUM 4.0
  • TI-2015-00474 Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface… CVSS 2.0LOW 3.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences