9.3
CVSSv2

CVE-2013-1192

Published: 25/04/2013 Updated: 30/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices prior to 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote malicious users to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco adaptive_security_appliance_device_manager

cisco adaptive_security_appliance_device_manager 5.0.1

cisco adaptive_security_appliance_device_manager 5.1.2

cisco adaptive_security_appliance_device_manager 5.1.1

cisco adaptive_security_appliance_device_manager 5.0.9

cisco adaptive_security_appliance_device_manager 5.0.8

cisco adaptive_security_appliance_device_manager 5.0.7

cisco adaptive_security_appliance_device_manager 5.2.3

cisco adaptive_security_appliance_device_manager 5.2.1

cisco adaptive_security_appliance_device_manager 5.0.5

cisco adaptive_security_appliance_device_manager 5.0.2

cisco adaptive_security_appliance_device_manager 5.2.4

cisco adaptive_security_appliance_device_manager 5.2.2

cisco adaptive_security_appliance_device_manager 5.0.6

cisco adaptive_security_appliance_device_manager 5.0.4

cisco nexus_5596up -

cisco nexus_5548p -

cisco nexus_5020 -

cisco nexus_5010 -

cisco nexus_5010p_switch -

cisco nexus_5020p_switch -

cisco nexus_5548up -

cisco nexus_5000 -

cisco mds_9000

Vendor Advisories

Cisco Device Manager contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands on a client host with the privileges of the user This vulnerability affects Cisco Device Manager for the Cisco MDS 9000 Family and Cisco Nexus 5000 Series Switches when it is installed or launched via the Java Network La ...