Login Request a demo
Unscored severity · published Apr 29, 2013
CVE-2013-1196
The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management Solution (LMS), Prime Collaboration, Unified Provisioning Manager, Network Services Manager, Prime Data Center Network Manager (DCNM), and Quad does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCug29384, CSCug13866, CSCug29400, CSCug29406, CSCug29411, CSCug29413, CSCug29416, CSCug29418, CSCug29422, CSCug29425, and CSCug29426, a different issue than CVE-2013-1125.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Application Networking Manager · Cisco
All versions, or not specified · source: NVD
CD
Context Directory Agent · Cisco
All versions, or not specified · source: NVD
IS
Identity Services Engine Software · Cisco
All versions, or not specified · source: NVD
NS
Network Services Manager · Cisco
All versions, or not specified · source: NVD
PC
Prime Collaboration · Cisco
All versions, or not specified · source: NVD
PD
Prime Data Center Network Manager · Cisco
All versions, or not specified · source: NVD
PL
Prime Lan Management Solution · Cisco
All versions, or not specified · source: NVD
PN
Prime Network Control System · Cisco
All versions, or not specified · source: NVD
QU
Quad · Cisco
All versions, or not specified · source: NVD
SA
Secure Access Control System · Cisco
All versions, or not specified · source: NVD
UP
Unified Provisioning Manager · Cisco
All versions, or not specified · source: NVD
Affected product
AN
Application Networking Manager
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1196
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1196
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1196
More from Application Networking Manager
–
CVE-2015-0651
Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine…
–
CVE-2013-1125
The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution…
–
CVE-2009-0618
Unspecified vulnerability in the Java agent in Cisco Application Networking Manager (ANM) before 2.0 Update A allows remote attackers to gain privileges, and cause a denial of…
–
CVE-2009-0617
Cisco Application Networking Manager (ANM) before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbitrary operating-system commands…
–
CVE-2009-0616
Cisco Application Networking Manager (ANM) before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the application, or cause a denial…