9

CVE-2012-0329

Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Digital Media Manager Version <= 5.2.2
Cisco ≫ Digital Media Manager Version 3.5
Cisco ≫ Digital Media Manager Version 4.0
Cisco ≫ Digital Media Manager Version 5.0
Cisco ≫ Digital Media Manager Version 5.0.2
Cisco ≫ Digital Media Manager Version 5.0.3
Cisco ≫ Digital Media Manager Version 5.1
Cisco ≫ Digital Media Manager Version 5.1.1
Cisco ≫ Digital Media Manager Version 5.2.1
Cisco ≫ Digital Media Manager Version 5.2.1.1
Cisco ≫ Digital Media Manager Version 5.2.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.21% 0.865
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9 8 10
AV:N/AC:L/Au:S/C:C/I:C/A:C
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120118-dmm
Vendor Advisory
http://www.securitytracker.com/id?1026541