Lucene search

CiscoCVE-2013-5493

HistorySep 13, 2013 - 2:10 p.m.

CVE-2013-5493

2013-09-1314:10:27

CWE-20

cisco

web.nvd.nist.gov

cisco

virtualization

security

firmware

vulnerability

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407.

Affected configurations

Nvd

Node

ciscovirtualization_experience_client_6000Match-

ciscovirtualization_experience_client_6000_series_firmwareMatch-

VendorProductVersionCPE
ciscovirtualization_experience_client_6000-cpe:2.3:h:cisco:virtualization_experience_client_6000:-:*:*:*:*:*:*:*
ciscovirtualization_experience_client_6000_series_firmware-cpe:2.3:o:cisco:virtualization_experience_client_6000_series_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	virtualization_experience_client_6000	-	cpe:2.3:h:cisco:virtualization_experience_client_6000:-:::::::*
cisco	virtualization_experience_client_6000_series_firmware	-	cpe:2.3:o:cisco:virtualization_experience_client_6000_series_firmware:-:::::::*

References

osvdb.org/97239

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5493

tools.cisco.com/security/center/viewAlert.x?alertId=30777

www.securitytracker.com/id/1029032

CVSS2

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2013-5493