Lucene search

K
cveCiscoCVE-2013-5490
HistorySep 23, 2013 - 10:18 a.m.

CVE-2013-5490

2013-09-2310:18:59
CWE-200
cisco
web.nvd.nist.gov
26
cisco
prime
data center network manager
dcnm
xxe
vulnerability
cve-2013-5490
nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

68.4%

Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCud80148.

Affected configurations

Nvd
Node
ciscoprime_data_center_network_managerRange6.1\(1b\)
OR
ciscoprime_data_center_network_managerMatch5.2\(2e\)
OR
ciscoprime_data_center_network_managerMatch6.1\(1a\)
Node
ciscoprime_data_center_network_managerMatch4.1\(2\)
OR
ciscoprime_data_center_network_managerMatch4.1\(3\)
OR
ciscoprime_data_center_network_managerMatch4.1\(4\)
OR
ciscoprime_data_center_network_managerMatch4.1\(5\)
OR
ciscoprime_data_center_network_managerMatch4.2\(1\)
OR
ciscoprime_data_center_network_managerMatch4.2\(3\)
OR
ciscoprime_data_center_network_managerMatch5.0\(2\)
OR
ciscoprime_data_center_network_managerMatch5.0\(3\)
OR
ciscoprime_data_center_network_managerMatch5.1\(1\)
OR
ciscoprime_data_center_network_managerMatch5.1\(2\)
OR
ciscoprime_data_center_network_managerMatch5.1\(3u\)
OR
ciscoprime_data_center_network_managerMatch5.2\(2\)
OR
ciscoprime_data_center_network_managerMatch5.2\(2a\)
OR
ciscoprime_data_center_network_managerMatch5.2\(2b\)
OR
ciscoprime_data_center_network_managerMatch5.2\(2c\)
OR
ciscoprime_data_center_network_managerMatch5.2\(2e\)
OR
ciscoprime_data_center_network_managerMatch6.1\(1a\)
OR
ciscoprime_data_center_network_managerMatch6.1\(1b\)
VendorProductVersionCPE
ciscoprime_data_center_network_manager*cpe:2.3:a:cisco:prime_data_center_network_manager:*:*:*:*:*:*:*:*
ciscoprime_data_center_network_manager5.2(2e)cpe:2.3:a:cisco:prime_data_center_network_manager:5.2\(2e\):*:*:*:*:*:*:*
ciscoprime_data_center_network_manager6.1(1a)cpe:2.3:a:cisco:prime_data_center_network_manager:6.1\(1a\):*:*:*:*:*:*:*
ciscoprime_data_center_network_manager4.1(2)cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(2\):*:*:*:*:*:*:*
ciscoprime_data_center_network_manager4.1(3)cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(3\):*:*:*:*:*:*:*
ciscoprime_data_center_network_manager4.1(4)cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(4\):*:*:*:*:*:*:*
ciscoprime_data_center_network_manager4.1(5)cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(5\):*:*:*:*:*:*:*
ciscoprime_data_center_network_manager4.2(1)cpe:2.3:a:cisco:prime_data_center_network_manager:4.2\(1\):*:*:*:*:*:*:*
ciscoprime_data_center_network_manager4.2(3)cpe:2.3:a:cisco:prime_data_center_network_manager:4.2\(3\):*:*:*:*:*:*:*
ciscoprime_data_center_network_manager5.0(2)cpe:2.3:a:cisco:prime_data_center_network_manager:5.0\(2\):*:*:*:*:*:*:*
Rows per page:
1-10 of 191

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.003

Percentile

68.4%