10

CVE-2013-3443

The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Wide Area Application Services Version 4.1.1 Update a
Cisco ≫ Wide Area Application Services Version 4.1.1 Update b
Cisco ≫ Wide Area Application Services Version 4.1.1 Update c
Cisco ≫ Wide Area Application Services Version 4.1.1 Update d
Cisco ≫ Wide Area Application Services Version 4.1.3 Update a
Cisco ≫ Wide Area Application Services Version 4.1.3 Update b
Cisco ≫ Wide Area Application Services Version 4.1.5 Update a
Cisco ≫ Wide Area Application Services Version 4.1.5 Update b
Cisco ≫ Wide Area Application Services Version 4.1.5 Update c
Cisco ≫ Wide Area Application Services Version 4.1.5 Update d
Cisco ≫ Wide Area Application Services Version 4.1.5 Update e
Cisco ≫ Wide Area Application Services Version 4.1.5 Update f
Cisco ≫ Wide Area Application Services Version 4.1.5 Update g
Cisco ≫ Wide Area Application Services Version 4.1.7 Update a
Cisco ≫ Wide Area Application Services Version 4.1.7 Update b
Cisco ≫ Wide Area Application Services Version 4.2.3 Update a
Cisco ≫ Wide Area Application Services Version 4.2.3 Update b
Cisco ≫ Wide Area Application Services Version 4.2.3 Update c
Cisco ≫ Wide Area Application Services Version 4.3.5 Update a
Cisco ≫ Wide Area Application Services Version 4.4.3 Update a
Cisco ≫ Wide Area Application Services Version 4.4.3 Update b
Cisco ≫ Wide Area Application Services Version 4.4.3 Update c
Cisco ≫ Wide Area Application Services Version 4.4.5 Update a
Cisco ≫ Wide Area Application Services Version 4.4.5 Update b
Cisco ≫ Wide Area Application Services Version 4.4.5 Update c
Cisco ≫ Wide Area Application Services Version 4.4.5 Update d
Cisco ≫ Wide Area Application Services Version 5.0.3 Update a
Cisco ≫ Wide Area Application Services Version 5.0.3 Update c
Cisco ≫ Wide Area Application Services Version 5.0.3 Update d
Cisco ≫ Wide Area Application Services Version 5.1.1 Update a
Cisco ≫ Wide Area Application Services Version 5.1.1 Update b
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6% 0.924
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://osvdb.org/95877
http://secunia.com/advisories/54367
http://secunia.com/advisories/54372
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-waascm
Vendor Advisory
http://www.securityfocus.com/bid/61542
http://www.securitytracker.com/id/1028851
https://exchange.xforce.ibmcloud.com/vulnerabilities/86121