CVE-2013-1192
Published Apr 25, 2013
Last updated 6 years ago
Overview
- Description
- The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-20
Evaluator
- Comment
- -
- Impact
- Per: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-fmdm "Cisco Device Manager versions 5.x and earlier. Note: Only Cisco Device Manager software installed or launched via JNLP file on Microsoft Windows is affected by this vulnerability."
- Solution
- Per: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-fmdm "Cisco Device Manager versions 5.x and earlier. Note: Only Cisco Device Manager software installed or launched via JNLP file on Microsoft Windows is affected by this vulnerability."
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79FD6080-B82E-4DB6-A4DF-470FE996E07C",
"versionEndIncluding": "5.2.5"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09BAF24A-AC9F-447E-9C35-315BA6271B2E"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6741F961-98F5-48C0-853E-C5B5C29172BC"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C84EB0EF-B0AF-4932-A719-31B97BFA3AA2"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "260A022E-EC6B-4D62-AE08-69F743D89827"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D17331FF-28B0-4EB0-B2FB-8A56218E6037"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98E79DFE-7496-4022-8A24-0723DD28BE9C"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E52DAC91-9280-4F7E-A0CF-750700FF3290"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B77C14F-03F5-4B90-8098-D90AACFC043F"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80C9A26D-FBFF-40C5-A041-6BB65511C53A"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D58402E4-472E-46AE-AC0C-25B12C9C6567"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD03EE75-B7A4-4C7A-B691-FC9E4C8BE594"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73C6A552-F328-4331-BBF8-EA3D6A5B3936"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D179D1F3-EB94-4D4F-9B0C-074B59570DAF"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8995A10A-C0A0-4297-9F7D-5B4C3D8A26BB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:nexus_5000:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F2B1E07-8519-4F58-9048-81ABA12E01DC"
},
{
"criteria": "cpe:2.3:h:cisco:nexus_5010:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E275D31F-4FA1-428E-AB4A-D2802FF0CF1A"
},
{
"criteria": "cpe:2.3:h:cisco:nexus_5010p_switch:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FD1E96B-1927-42DC-A47B-5632CED2D40F"
},
{
"criteria": "cpe:2.3:h:cisco:nexus_5020:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA7F5823-41A8-47C8-A154-02C6C31EF76A"
},
{
"criteria": "cpe:2.3:h:cisco:nexus_5020p_switch:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0737BA36-75AB-478D-9001-3DA3E49C6F00"
},
{
"criteria": "cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5519EA9-1236-4F51-9974-E3FC1B26B5D2"
},
{
"criteria": "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
},
{
"criteria": "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79FD6080-B82E-4DB6-A4DF-470FE996E07C",
"versionEndIncluding": "5.2.5"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09BAF24A-AC9F-447E-9C35-315BA6271B2E"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6741F961-98F5-48C0-853E-C5B5C29172BC"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C84EB0EF-B0AF-4932-A719-31B97BFA3AA2"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "260A022E-EC6B-4D62-AE08-69F743D89827"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D17331FF-28B0-4EB0-B2FB-8A56218E6037"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98E79DFE-7496-4022-8A24-0723DD28BE9C"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E52DAC91-9280-4F7E-A0CF-750700FF3290"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B77C14F-03F5-4B90-8098-D90AACFC043F"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80C9A26D-FBFF-40C5-A041-6BB65511C53A"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D58402E4-472E-46AE-AC0C-25B12C9C6567"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD03EE75-B7A4-4C7A-B691-FC9E4C8BE594"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73C6A552-F328-4331-BBF8-EA3D6A5B3936"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D179D1F3-EB94-4D4F-9B0C-074B59570DAF"
},
{
"criteria": "cpe:2.3:a:cisco:adaptive_security_appliance_device_manager:5.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8995A10A-C0A0-4297-9F7D-5B4C3D8A26BB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F2ED90B-DDBA-49DE-AC78-20E7D77C8858"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]