Login Request a demo
Unscored severity · published Aug 1, 2013
CVE-2013-3444
The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS…
–
CVSS
4.2%
EPSS
No
On KEV
Description
The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Application And Content Networking System Software · Cisco
4.1.3; 4.2.3; 4.2.5; 4.2.7.3; 4.2.9.3; 4.2.11.5; +34 more · source: NVD
EC
Enterprise Content Delivery Network Software · Cisco
2.0; 2.5.3; 2.5.5 · source: NVD
IS
Internet Streamer Content Delivery System · Cisco
2.0; 2.6; 3.1 · source: NVD
VD
Videoscape Delivery System For Internet Streamer · Cisco
1.0.0; 3.2.0; 3.2.1 · source: NVD
VD
Videoscape Delivery System Origin Server · Cisco
1.0 · source: NVD
VD
Videoscape Distribution Suite Optimization Engine · Cisco
1.0.0 · source: NVD
VD
Videoscape Distribution Suite Service Broker · Cisco
1.0.0; 1.0.1; 1.1.0 · source: NVD
WA
Wide Area Application Services · Cisco
4.1.1; 4.1.1; 4.1.1; 4.1.1; 4.1.1; 4.1.3; +34 more · source: NVD
Affected product
AA
Application And Content Networking System Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3444
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3444
secunia.com
http://secunia.com/advisories/54367
secunia.com
http://secunia.com/advisories/54369
secunia.com
http://secunia.com/advisories/54370
secunia.com
http://secunia.com/advisories/54372
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-cm
www.securityfocus.com
http://www.securityfocus.com/bid/61543
More from Application And Content Networking System Software
–
CVE-2015-0774
Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote attackers to inject arbitrary web script or HTML via a…