Lucene search
CiscoCVE-2013-1224HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-1224
2022-10-0316:14:49
CWE-22
cisco
web.nvd.nist.gov
20
cve-2013-1224
directory traversal
vulnerability
cisco unified customer voice portal
cvp software
remote attackers
file overwrite
http
https
incorrect parameter validation
bug id cscub38369
nvd
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:C/A:N
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
48.6%
Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369.
Affected configurations
Node
ciscounified_customer_voice_portalRange≤9.0\(1\)
ORciscounified_customer_voice_portalMatch3.0sr1
ORciscounified_customer_voice_portalMatch3.0sr2
ORciscounified_customer_voice_portalMatch3.6\(10\)es01
ORciscounified_customer_voice_portalMatch4.0
ORciscounified_customer_voice_portalMatch4.0\(2\)
ORciscounified_customer_voice_portalMatch4.0\(2\)sr1
ORciscounified_customer_voice_portalMatch4.1
ORciscounified_customer_voice_portalMatch7.0
ORciscounified_customer_voice_portalMatch7.0\(2\)
ORciscounified_customer_voice_portalMatch8.0\(1\)
ORciscounified_customer_voice_portalMatch8.5\(1\)
ORciscounified_customer_voice_portalMatch9.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_customer_voice_portal | 4.0 | cpe:/a:cisco:unified_customer_voice_portal:4.0::: |
| cisco | unified_customer_voice_portal | 7.0 | cpe:/a:cisco:unified_customer_voice_portal:7.0::: |
| cisco | unified_customer_voice_portal | 4.0%282%29 | cpe:/a:cisco:unified_customer_voice_portal:4.0%282%29:sr1:: |
| cisco | unified_customer_voice_portal | 3.0 | cpe:/a:cisco:unified_customer_voice_portal:3.0:sr1:: |
| cisco | unified_customer_voice_portal | 8.0%281%29 | cpe:/a:cisco:unified_customer_voice_portal:8.0%281%29::: |
| cisco | unified_customer_voice_portal | 9.0 | cpe:/a:cisco:unified_customer_voice_portal:9.0::: |
| cisco | unified_customer_voice_portal | 3.6%2810%29 | cpe:/a:cisco:unified_customer_voice_portal:3.6%2810%29:es01:: |
| cisco | unified_customer_voice_portal | 3.0 | cpe:/a:cisco:unified_customer_voice_portal:3.0:sr2:: |
| cisco | unified_customer_voice_portal | 4.1 | cpe:/a:cisco:unified_customer_voice_portal:4.1::: |
| cisco | unified_customer_voice_portal | 7.0%282%29 | cpe:/a:cisco:unified_customer_voice_portal:7.0%282%29::: |
Related
cvelist
cvelist
CVE-2013-1224
2022-10-03 16:14:49
nvd
nvd
CVE-2013-1224
2013-05-09 12:31:19
prion
prion
Directory traversal
2013-05-09 12:31:00
securityvulns
securityvulns
Cisco Unified Customer Voice Portal multiple security vulnerabilities
2013-05-10 00:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software
2013-05-08 16:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:C/A:N
AI Score
6.9
Confidence
Low
EPSS
0.001
Percentile
48.6%
Related for CVE-2013-1224