PT-2013-2959 · Microsoft+1 · Windows+1

Published 2013-04-25 · Updated 2018-10-30 · CVE-2013-1192

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Device Manager for Cisco MDS 9000 devices versions prior to 5.2.8 Cisco Device Manager for Cisco Nexus 5000 devices (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file.

Recommendations For Cisco Device Manager for Cisco MDS 9000 devices versions prior to 5.2.8, update to version 5.2.8 or later. For Cisco Device Manager for Cisco Nexus 5000 devices, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-1192

Affected Products

Cisco Device Manager

Windows

References · 2

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-fmdm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1192 · Security Note