---
id: CVE-2013-10004
title: >-
  Telecommunication Software SAMwin Contact Center Suite Password
  SAMwinLIBVB.dll passwordScramble improper authentication
summary: >-
  A vulnerability classified as critical was found in Telecommunication Software
  SAMwin Contact Center Suite 5.1. This vulnerability affects the function
  passwordScramble in the library SAMwinLIBVB.dll of the component Password
  Handler. In…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-287
vendor: Telecommunication Software
product: SAMwin Contact Center Suite
affected:
  - samwin_contact_center_suite 5.1
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2025-04-14T16:56:49.362757Z'
exploitAvailable: true
published: '2022-05-24'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T18:50:51.095Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2013-10004'
references:
  - url: 'http://www.modzero.ch/advisories/MZ-13-07_SAMwin_Collisions.txt'
  - url: 'https://vuldb.com/?id.12790'
tags:
  - cve.org
  - exploit-available
epss: 0.00979
epssPercentile: 0.62312
ingestedAt: '2026-11-05T20:33:06.372Z'
---

## Overview

A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Incorrect implementation of a hashing function leads to predictable authentication possibilities. Upgrading to version 6.2 is able to address this issue. It is recommended to upgrade the affected component.

## Affected

- `samwin_contact_center_suite 5.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.