Code injection

2013-04-2510:55:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.5%

JSON

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802.

CPENameOperatorVersion
adaptive_security_appliance_device_managerle5.2.5
adaptive_security_appliance_device_managereq5.0.1
adaptive_security_appliance_device_managereq5.0.2
adaptive_security_appliance_device_managereq5.0.4
adaptive_security_appliance_device_managereq5.0.5
adaptive_security_appliance_device_managereq5.0.6
adaptive_security_appliance_device_managereq5.0.7
adaptive_security_appliance_device_managereq5.0.8
adaptive_security_appliance_device_managereq5.0.9
adaptive_security_appliance_device_managereq5.1.1

Name	Operator	Version
adaptive_security_appliance_device_manager	le	5.2.5
adaptive_security_appliance_device_manager	eq	5.0.1
adaptive_security_appliance_device_manager	eq	5.0.2
adaptive_security_appliance_device_manager	eq	5.0.4
adaptive_security_appliance_device_manager	eq	5.0.5
adaptive_security_appliance_device_manager	eq	5.0.6
adaptive_security_appliance_device_manager	eq	5.0.7
adaptive_security_appliance_device_manager	eq	5.0.8
adaptive_security_appliance_device_manager	eq	5.0.9
adaptive_security_appliance_device_manager	eq	5.1.1