Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-3444

Опубликовано: 01 авг. 2013
Источник: nvd
CVSS2: 9
EPSS Низкий

Описание

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:wide_area_application_services:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.1:a:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.1:b:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.1:c:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.1:d:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.3:a:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.3:b:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.5:a:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.5:b:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.5:c:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.5:d:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.5:e:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.5:f:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.5:g:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.7:a:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.1.7:b:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:cisco:wide_area_application_services:4.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.3.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.3.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.3.5:a:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:cisco:wide_area_application_services:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:5.0.3:a:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:5.0.3:c:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:5.0.3:d:*:*:*:*:*:*
Конфигурация 4

Одно из

cpe:2.3:a:cisco:wide_area_application_services:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.2.3:a:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.2.3:b:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.2.3:c:*:*:*:*:*:*
Конфигурация 5

Одно из

cpe:2.3:a:cisco:wide_area_application_services:4.4.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.4.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.4.3:a:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.4.3:b:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.4.3:c:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.4.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.4.5:a:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.4.5:b:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.4.5:c:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.4.5:d:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.4.7:*:*:*:*:*:*:*
Конфигурация 6

Одно из

cpe:2.3:a:cisco:wide_area_application_services:5.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:5.1.1:a:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:5.1.1:b:*:*:*:*:*:*
Конфигурация 7
cpe:2.3:a:cisco:wide_area_application_services:5.2:*:*:*:*:*:*:*
Конфигурация 8

Одно из

cpe:2.3:a:cisco:wide_area_application_services:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.9:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.11:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.13:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.17:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.19:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.21:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.23:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.25:*:*:*:*:*:*:*
cpe:2.3:a:cisco:wide_area_application_services:4.0.27:*:*:*:*:*:*:*
Конфигурация 9

Одно из

cpe:2.3:a:cisco:application_and_content_networking_system_software:4.1.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.7.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.9.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.11.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:4.2.13.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.3.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.5.9:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.7.10:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.9.9:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.11.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.13.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.15.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.0.17.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.3.15:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.7.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.9.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.11.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.13.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.1.15.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.4.1.10:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.4.3.17:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.4.5.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.4.7.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.1.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.5.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.7.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.9.9:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.11.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.13.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.15.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.17:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.19:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.21:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.23:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.25:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.27:*:*:*:*:*:*:*
cpe:2.3:a:cisco:application_and_content_networking_system_software:5.5.29:*:*:*:*:*:*:*
cpe:2.3:a:cisco:enterprise_content_delivery_network_software:2.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:enterprise_content_delivery_network_software:2.5.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:enterprise_content_delivery_network_software:2.5.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:internet_streamer_content_delivery_system:2.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:internet_streamer_content_delivery_system:2.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:internet_streamer_content_delivery_system:3.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:videoscape_delivery_system_for_internet_streamer:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:videoscape_delivery_system_for_internet_streamer:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:videoscape_delivery_system_for_internet_streamer:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:videoscape_delivery_system_origin_server:1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:videoscape_distribution_suite_optimization_engine:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:videoscape_distribution_suite_service_broker:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:videoscape_distribution_suite_service_broker:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:videoscape_distribution_suite_service_broker:1.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 85%
0.02636
Низкий

9 Critical

CVSS2

Дефекты

CWE-78

Связанные уязвимости

github
больше 3 лет назад

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.

EPSS

Процентиль: 85%
0.02636
Низкий

9 Critical

CVSS2

Дефекты

CWE-78