PT-2013-5590 · Cisco · Cisco Firewall Services Module

Publicado 2013-10-13 · Atualizado 2013-10-15 · CVE-2013-5506

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Média

Vetor base

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firewall Services Module (FWSM) versions 3.1.x through 3.2.x before 3.2(25) Cisco Firewall Services Module (FWSM) versions 4.x before 4.1(13)

Description The issue affects the authorization functionality when multiple-context mode is enabled, allowing local users to read or modify any context's configuration via unspecified commands.

Recommendations For Cisco Firewall Services Module (FWSM) versions 3.1.x through 3.2.x before 3.2(25), update to version 3.2(25) or later. For Cisco Firewall Services Module (FWSM) versions 4.x before 4.1(13), update to version 4.1(13) or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-5506

Produtos afetados

Cisco Firewall Services Module

Referências · 2

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131009-fwsm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5506 · Nota de Segurança