CVE Database
/

CVE-2013-3444

Back to search

CVE-2013-3444

Published: Jul 31, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.

VendorProductVersions

n/a

n/a

affected
n/a

References

1028852
vdb-entry
x_refsource_SECTRACK
54367
third-party-advisory
x_refsource_SECUNIA
54372
third-party-advisory
x_refsource_SECUNIA
61543
vdb-entry
x_refsource_BID
54370
third-party-advisory
x_refsource_SECUNIA
54369
third-party-advisory
x_refsource_SECUNIA
1028853
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now