Unscored severity · published Apr 25, 2013
CVE-2013-1192
The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary…
–
CVSS
2.4%
EPSS
No
On KEV
Description
The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Adaptive Security Appliance Device Manager · Cisco
through 5.2.5; 5.0.1; 5.0.2; 5.0.4; 5.0.5; 5.0.6; +24 more · source: NVD
M9
Mds 9000 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5000 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5010 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5010p Switch · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5020 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5020p Switch · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5548p · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5548up · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5596up · Cisco
All versions, or not specified · source: NVD
Affected product
AS
Adaptive Security Appliance Device Manager
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1192
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1192
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-fmdm
More from Adaptive Security Appliance Device Manager
7.5
CVE-2019-1715
A vulnerability in the Deterministic Random Bit Generator (DRBG), also known as Pseudorandom Number Generator (PRNG), used in Cisco Adaptive Security Appliance (ASA) Software and…
–
CVE-2007-0397
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS…