Lucene search
HistorySep 23, 2013 - 10:18 a.m.
CVE-2013-5486
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.973
Percentile
99.9%
Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.
Affected configurations
Node
ciscoprime_data_center_network_managerMatch4.1\(2\)
ORciscoprime_data_center_network_managerMatch4.1\(3\)
ORciscoprime_data_center_network_managerMatch4.1\(4\)
ORciscoprime_data_center_network_managerMatch4.1\(5\)
ORciscoprime_data_center_network_managerMatch4.2\(1\)
ORciscoprime_data_center_network_managerMatch4.2\(3\)
ORciscoprime_data_center_network_managerMatch5.0\(2\)
ORciscoprime_data_center_network_managerMatch5.0\(3\)
ORciscoprime_data_center_network_managerMatch5.1\(1\)
ORciscoprime_data_center_network_managerMatch5.1\(2\)
ORciscoprime_data_center_network_managerMatch5.1\(3u\)
ORciscoprime_data_center_network_managerMatch5.2\(2\)
ORciscoprime_data_center_network_managerMatch5.2\(2a\)
ORciscoprime_data_center_network_managerMatch5.2\(2b\)
ORciscoprime_data_center_network_managerMatch5.2\(2c\)
ORciscoprime_data_center_network_managerMatch5.2\(2e\)
ORciscoprime_data_center_network_managerMatch6.1\(1a\)
ORciscoprime_data_center_network_managerMatch6.1\(1b\)
Node
ciscoprime_data_center_network_managerRange≤6.1\(1b\)
ORciscoprime_data_center_network_managerMatch5.2\(2e\)
ORciscoprime_data_center_network_managerMatch6.1\(1a\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | prime_data_center_network_manager | 4.1(2) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(2\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 4.1(3) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(3\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 4.1(4) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(4\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 4.1(5) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.1\(5\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 4.2(1) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.2\(1\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 4.2(3) | cpe:2.3:a:cisco:prime_data_center_network_manager:4.2\(3\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 5.0(2) | cpe:2.3:a:cisco:prime_data_center_network_manager:5.0\(2\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 5.0(3) | cpe:2.3:a:cisco:prime_data_center_network_manager:5.0\(3\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 5.1(1) | cpe:2.3:a:cisco:prime_data_center_network_manager:5.1\(1\):*:*:*:*:*:*:* |
| cisco | prime_data_center_network_manager | 5.1(2) | cpe:2.3:a:cisco:prime_data_center_network_manager:5.1\(2\):*:*:*:*:*:*:* |
Related
zdi
zdi
exploitdb
exploitdb
Cisco Prime Data Center Network Manager - Arbitrary File Upload (Metasploit)
2013-12-03 00:00:00
packetstorm
packetstorm
Cisco Prime Data Center Network Manager Arbitrary File Upload
2013-12-03 00:00:00
prion
prion
Directory traversal
2013-09-23 10:18:00
cvelist
cvelist
CVE-2013-5486
2013-09-23 10:00:00
checkpoint_advisories
checkpoint_advisories
zdt
zdt
Cisco Prime Data Center Network Manager Arbitrary File Upload
2013-12-03 00:00:00
Cisco Prime Data Center Network Manager Arbitrary File Upload Vulnerability
2013-12-03 00:00:00
metasploit
metasploit
Cisco Prime Data Center Network Manager Arbitrary File Upload
2013-11-30 05:11:44
cve
cve
CVE-2013-5486
2013-09-23 10:18:59
cisco
cisco
Multiple Vulnerabilities in Cisco Prime Data Center Network Manager
2013-09-18 16:00:00
nessus
nessus
securityvulns
securityvulns
Cisco Prime Data Center / Prime Central security vulnerabilities
2013-10-03 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.973
Percentile
99.9%
Related for NVD:CVE-2013-5486