Lucene search

CiscoCVE-2013-3402

HistoryJul 18, 2013 - 12:48 p.m.

CVE-2013-3402

2013-07-1812:48:56

CWE-94

cisco

web.nvd.nist.gov

cve-2013-3402

cisco

unified communications manager

cucm

remote authentication

arbitrary commands

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

44.7%

JSON

An unspecified function in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitrary commands via unknown vectors, aka Bug ID CSCuh73440.

Affected configurations

Nvd

Node

ciscounified_communications_managerMatch7.1\(2a\)

ciscounified_communications_managerMatch7.1\(2a\)su1

ciscounified_communications_managerMatch7.1\(2b\)

ciscounified_communications_managerMatch7.1\(2b\)su1

ciscounified_communications_managerMatch7.1\(3\)

ciscounified_communications_managerMatch7.1\(3a\)

ciscounified_communications_managerMatch7.1\(3a\)su1

ciscounified_communications_managerMatch7.1\(3a\)su1a

ciscounified_communications_managerMatch7.1\(3b\)

ciscounified_communications_managerMatch7.1\(3b\)su1

ciscounified_communications_managerMatch7.1\(3b\)su2

ciscounified_communications_managerMatch7.1\(5\)

ciscounified_communications_managerMatch7.1\(5\)su1

ciscounified_communications_managerMatch7.1\(5\)su1a

ciscounified_communications_managerMatch7.1\(5a\)

ciscounified_communications_managerMatch7.1\(5b\)

ciscounified_communications_managerMatch7.1\(5b\)su1

ciscounified_communications_managerMatch7.1\(5b\)su1a

ciscounified_communications_managerMatch7.1\(5b\)su2

ciscounified_communications_managerMatch7.1\(5b\)su3

ciscounified_communications_managerMatch7.1\(5b\)su4

ciscounified_communications_managerMatch7.1\(5b\)su5

ciscounified_communications_managerMatch7.1\(5b\)su6

Node

ciscounified_communications_managerMatch8.0

ciscounified_communications_managerMatch8.0\(1\)

ciscounified_communications_managerMatch8.0\(2\)

ciscounified_communications_managerMatch8.0\(2a\)

ciscounified_communications_managerMatch8.0\(2b\)

ciscounified_communications_managerMatch8.0\(2c\)

ciscounified_communications_managerMatch8.0\(2c\)su1

ciscounified_communications_managerMatch8.0\(3\)

ciscounified_communications_managerMatch8.0\(3a\)

ciscounified_communications_managerMatch8.0\(3a\)su1

ciscounified_communications_managerMatch8.0\(3a\)su2

ciscounified_communications_managerMatch8.0\(3a\)su3

Node

ciscounified_communications_managerMatch8.5

ciscounified_communications_managerMatch8.5\(1\)

ciscounified_communications_managerMatch8.5\(1\)su1

ciscounified_communications_managerMatch8.5\(1\)su2

ciscounified_communications_managerMatch8.5\(1\)su3

ciscounified_communications_managerMatch8.5\(1\)su4

ciscounified_communications_managerMatch8.5\(1\)su5

Node

ciscounified_communications_managerMatch8.6

ciscounified_communications_managerMatch8.6\(1\)

ciscounified_communications_managerMatch8.6\(1a\)

ciscounified_communications_managerMatch8.6\(2\)

ciscounified_communications_managerMatch8.6\(2a\)

ciscounified_communications_managerMatch8.6\(2a\)su1

ciscounified_communications_managerMatch8.6\(2a\)su2

ciscounified_communications_managerMatch8.6\(2a\)su3

ciscounified_communications_managerMatch8.6\(3\)

ciscounified_communications_managerMatch8.6\(4\)

Node

ciscounified_communications_managerMatch9.0\(1\)

ciscounified_communications_managerMatch9.1\(1\)

ciscounified_communications_managerMatch9.1\(2\)

ciscounified_communications_managerMatch9.1.1\(a\)

VendorProductVersionCPE
ciscounified_communications_manager7.1%282b%29su1cpe:/a:cisco:unified_communications_manager:7.1%282b%29su1:::
ciscounified_communications_manager7.1%282a%29su1cpe:/a:cisco:unified_communications_manager:7.1%282a%29su1:::
ciscounified_communications_manager7.1%285b%29su6cpe:/a:cisco:unified_communications_manager:7.1%285b%29su6:::
ciscounified_communications_manager7.1%283a%29cpe:/a:cisco:unified_communications_manager:7.1%283a%29:::
ciscounified_communications_manager7.1%282b%29cpe:/a:cisco:unified_communications_manager:7.1%282b%29:::
ciscounified_communications_manager7.1%285%29su1acpe:/a:cisco:unified_communications_manager:7.1%285%29su1a:::
ciscounified_communications_manager7.1%285b%29su2cpe:/a:cisco:unified_communications_manager:7.1%285b%29su2:::
ciscounified_communications_manager7.1%283a%29su1cpe:/a:cisco:unified_communications_manager:7.1%283a%29su1:::
ciscounified_communications_manager7.1%283a%29su1acpe:/a:cisco:unified_communications_manager:7.1%283a%29su1a:::
ciscounified_communications_manager7.1%285%29cpe:/a:cisco:unified_communications_manager:7.1%285%29:::

Vendor	Product	Version	CPE
cisco	unified_communications_manager	7.1%282b%29su1	cpe:/a:cisco:unified_communications_manager:7.1%282b%29su1:::
cisco	unified_communications_manager	7.1%282a%29su1	cpe:/a:cisco:unified_communications_manager:7.1%282a%29su1:::
cisco	unified_communications_manager	7.1%285b%29su6	cpe:/a:cisco:unified_communications_manager:7.1%285b%29su6:::
cisco	unified_communications_manager	7.1%283a%29	cpe:/a:cisco:unified_communications_manager:7.1%283a%29:::
cisco	unified_communications_manager	7.1%282b%29	cpe:/a:cisco:unified_communications_manager:7.1%282b%29:::
cisco	unified_communications_manager	7.1%285%29su1a	cpe:/a:cisco:unified_communications_manager:7.1%285%29su1a:::
cisco	unified_communications_manager	7.1%285b%29su2	cpe:/a:cisco:unified_communications_manager:7.1%285b%29su2:::
cisco	unified_communications_manager	7.1%283a%29su1	cpe:/a:cisco:unified_communications_manager:7.1%283a%29su1:::
cisco	unified_communications_manager	7.1%283a%29su1a	cpe:/a:cisco:unified_communications_manager:7.1%283a%29su1a:::
cisco	unified_communications_manager	7.1%285%29	cpe:/a:cisco:unified_communications_manager:7.1%285%29:::

Rows per page:

1-10 of 231

References

secunia.com/advisories/54249

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-cucm

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

44.7%

JSON

Related for CVE-2013-3402