Unscored severity · published Feb 19, 2013
CVE-2013-1125
The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services Manager does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CSCue46031, CSCue46035, and CSCue46042.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Application Networking Manager · Cisco
All versions, or not specified · source: NVD
CD
Context Directory Agent · Cisco
All versions, or not specified · source: NVD
IS
Identity Services Engine Software · Cisco
All versions, or not specified · source: NVD
NS
Network Services Manager · Cisco
All versions, or not specified · source: NVD
PC
Prime Collaboration · Cisco
All versions, or not specified · source: NVD
PL
Prime Lan Management Solution · Cisco
All versions, or not specified · source: NVD
PN
Prime Network Control System · Cisco
All versions, or not specified · source: NVD
QU
Quad · Cisco
All versions, or not specified · source: NVD
SA
Secure Access Control System · Cisco
All versions, or not specified · source: NVD
UP
Unified Provisioning Manager · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1125
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1125
tools.cisco.com
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1125
More from Application Networking Manager
–
CVE-2015-0651
Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine…
–
CVE-2013-1196
The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime…
–
CVE-2009-0618
Unspecified vulnerability in the Java agent in Cisco Application Networking Manager (ANM) before 2.0 Update A allows remote attackers to gain privileges, and cause a denial of…
–
CVE-2009-0617
Cisco Application Networking Manager (ANM) before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands…
–
CVE-2009-0616
Cisco Application Networking Manager (ANM) before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial…