CVE-2013-1940

LOW · CVSS 2.1 EPSS 0.38%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-05-13 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2013-1940

Severity

LOW

CVSS

2.1

EPSS

0.38%

Original Filing — NVD Description

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.