10

CVE-2013-3443

The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Wide Area Application Services Version4.1.1 Updatea
Cisco ≫ Wide Area Application Services Version4.1.1 Updateb
Cisco ≫ Wide Area Application Services Version4.1.1 Updatec
Cisco ≫ Wide Area Application Services Version4.1.1 Updated
Cisco ≫ Wide Area Application Services Version4.1.3 Updatea
Cisco ≫ Wide Area Application Services Version4.1.3 Updateb
Cisco ≫ Wide Area Application Services Version4.1.5 Updatea
Cisco ≫ Wide Area Application Services Version4.1.5 Updateb
Cisco ≫ Wide Area Application Services Version4.1.5 Updatec
Cisco ≫ Wide Area Application Services Version4.1.5 Updated
Cisco ≫ Wide Area Application Services Version4.1.5 Updatee
Cisco ≫ Wide Area Application Services Version4.1.5 Updatef
Cisco ≫ Wide Area Application Services Version4.1.5 Updateg
Cisco ≫ Wide Area Application Services Version4.1.7 Updatea
Cisco ≫ Wide Area Application Services Version4.1.7 Updateb
Cisco ≫ Wide Area Application Services Version4.2.3 Updatea
Cisco ≫ Wide Area Application Services Version4.2.3 Updateb
Cisco ≫ Wide Area Application Services Version4.2.3 Updatec
Cisco ≫ Wide Area Application Services Version4.3.5 Updatea
Cisco ≫ Wide Area Application Services Version4.4.3 Updatea
Cisco ≫ Wide Area Application Services Version4.4.3 Updateb
Cisco ≫ Wide Area Application Services Version4.4.3 Updatec
Cisco ≫ Wide Area Application Services Version4.4.5 Updatea
Cisco ≫ Wide Area Application Services Version4.4.5 Updateb
Cisco ≫ Wide Area Application Services Version4.4.5 Updatec
Cisco ≫ Wide Area Application Services Version4.4.5 Updated
Cisco ≫ Wide Area Application Services Version5.0.3 Updatea
Cisco ≫ Wide Area Application Services Version5.0.3 Updatec
Cisco ≫ Wide Area Application Services Version5.0.3 Updated
Cisco ≫ Wide Area Application Services Version5.1.1 Updatea
Cisco ≫ Wide Area Application Services Version5.1.1 Updateb
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.92% 0.912
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.