CVE-2013-6838

CVE-2013-6838 describes a critical vulnerability in an unspecified Enghouse Interactive Professional Services "addon product" for Enghouse Interactive IVR Pro (VIP2000) 9.0.3, specifically when deployed with OpenVZ and fallback customization. The flaw stems from the use of a single, shared SSH private key across multiple customer installations, enabling remote attackers to achieve privilege escalation. With a CVSS score of 10.0, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.