Lucene search
CiscoCVE-2013-5486HistorySep 23, 2013 - 10:18 a.m.
CVE-2013-5486
2013-09-2310:18:59
CWE-78
cisco
web.nvd.nist.gov
133
cve-2013-5486
directory traversal
vulnerability
dcnm-san server
cisco prime
data center network manager
bug ids
cscue77035
cscue77036
jboss autodeploy
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
9.6
Confidence
High
EPSS
0.973
Percentile
99.9%
Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.
Affected configurations
Node
ciscoprime_data_center_network_managerMatch4.1\(2\)
ORciscoprime_data_center_network_managerMatch4.1\(3\)
ORciscoprime_data_center_network_managerMatch4.1\(4\)
ORciscoprime_data_center_network_managerMatch4.1\(5\)
ORciscoprime_data_center_network_managerMatch4.2\(1\)
ORciscoprime_data_center_network_managerMatch4.2\(3\)
ORciscoprime_data_center_network_managerMatch5.0\(2\)
ORciscoprime_data_center_network_managerMatch5.0\(3\)
ORciscoprime_data_center_network_managerMatch5.1\(1\)
ORciscoprime_data_center_network_managerMatch5.1\(2\)
ORciscoprime_data_center_network_managerMatch5.1\(3u\)
ORciscoprime_data_center_network_managerMatch5.2\(2\)
ORciscoprime_data_center_network_managerMatch5.2\(2a\)
ORciscoprime_data_center_network_managerMatch5.2\(2b\)
ORciscoprime_data_center_network_managerMatch5.2\(2c\)
ORciscoprime_data_center_network_managerMatch5.2\(2e\)
ORciscoprime_data_center_network_managerMatch6.1\(1a\)
ORciscoprime_data_center_network_managerMatch6.1\(1b\)
Node
ciscoprime_data_center_network_managerRange≤6.1\(1b\)
ORciscoprime_data_center_network_managerMatch5.2\(2e\)
ORciscoprime_data_center_network_managerMatch6.1\(1a\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | prime_data_center_network_manager | 4.1(2) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(2\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 4.1(3) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(3\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 4.1(4) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(4\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 4.1(5) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(5\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 4.2(1) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.2\(1\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 4.2(3) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.2\(3\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 5.0(2) | cpe:2.3:a:cisco:prime_data_center_network_manager:5.0\(2\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 5.0(3) | cpe:2.3:a:cisco:prime_data_center_network_manager:5.0\(3\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 5.1(1) | cpe:2.3:a:cisco:prime_data_center_network_manager:5.1\(1\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 5.1(2) | cpe:2.3:a:cisco:prime_data_center_network_manager:5.1\(2\):*:*:*:*:*:*:* |
Related
zdi
zdi
exploitdb
exploitdb
Cisco Prime Data Center Network Manager - Arbitrary File Upload (Metasploit)
2013-12-03 00:00:00
checkpoint_advisories
checkpoint_advisories
zdt
zdt
Cisco Prime Data Center Network Manager Arbitrary File Upload
2013-12-03 00:00:00
Cisco Prime Data Center Network Manager Arbitrary File Upload Vulnerability
2013-12-03 00:00:00
metasploit
metasploit
Cisco Prime Data Center Network Manager Arbitrary File Upload
2013-11-30 05:11:44
nvd
nvd
CVE-2013-5486
2013-09-23 10:18:59
packetstorm
packetstorm
Cisco Prime Data Center Network Manager Arbitrary File Upload
2013-12-03 00:00:00
prion
prion
Directory traversal
2013-09-23 10:18:00
cvelist
cvelist
CVE-2013-5486
2013-09-23 10:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco Prime Data Center Network Manager
2013-09-18 16:00:00
nessus
nessus
securityvulns
securityvulns
Cisco Prime Data Center / Prime Central security vulnerabilities
2013-10-03 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
9.6
Confidence
High
EPSS
0.973
Percentile
99.9%
Related for CVE-2013-5486