CVE-2013-1104

Severity Score

9.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP User-Agent header, aka Bug ID CSCuc15636.

La funcionalidad de perfiles HTTP en Cisco Wireless LAN Controller (WLC) de los dispositivos con software v7.3.101.0 permite a usuarios remotos autenticados ejecutar código arbitrario a través de una cabecera manipulada HTTP User-Agent, también conocido como Bug ID CSCuc15636.

*Credits: N/A

CVSS Scores

NISTv2 9.0

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-01-11 CVE Reserved
2013-01-24 CVE Published
2023-03-07 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (6)

URL	Tag	Source
http://osvdb.org/89533	Vdb Entry
http://secunia.com/advisories/51965	Third Party Advisory
http://www.securityfocus.com/bid/57524	Vdb Entry
http://www.securitytracker.com/id/1028027	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/81489	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130123-wlc	2017-08-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	2000 Wireless Lan Controller Search vendor "Cisco" for product "2000 Wireless Lan Controller"	*	-	Affected	in	Cisco Search vendor "Cisco"	Wireless Lan Controller Software Search vendor "Cisco" for product "Wireless Lan Controller Software"	7.3.101.0 Search vendor "Cisco" for product "Wireless Lan Controller Software" and version "7.3.101.0"	-	Affected
Cisco Search vendor "Cisco"	2100 Wireless Lan Controller Search vendor "Cisco" for product "2100 Wireless Lan Controller"	*	-	Affected	in	Cisco Search vendor "Cisco"	Wireless Lan Controller Software Search vendor "Cisco" for product "Wireless Lan Controller Software"	7.3.101.0 Search vendor "Cisco" for product "Wireless Lan Controller Software" and version "7.3.101.0"	-	Affected
Cisco Search vendor "Cisco"	2500 Wireless Lan Controller Search vendor "Cisco" for product "2500 Wireless Lan Controller"	-	-	Affected	in	Cisco Search vendor "Cisco"	Wireless Lan Controller Software Search vendor "Cisco" for product "Wireless Lan Controller Software"	7.3.101.0 Search vendor "Cisco" for product "Wireless Lan Controller Software" and version "7.3.101.0"	-	Affected
Cisco Search vendor "Cisco"	4100 Wireless Lan Controller Search vendor "Cisco" for product "4100 Wireless Lan Controller"	*	-	Affected	in	Cisco Search vendor "Cisco"	Wireless Lan Controller Software Search vendor "Cisco" for product "Wireless Lan Controller Software"	7.3.101.0 Search vendor "Cisco" for product "Wireless Lan Controller Software" and version "7.3.101.0"	-	Affected
Cisco Search vendor "Cisco"	4400 Wireless Lan Controller Search vendor "Cisco" for product "4400 Wireless Lan Controller"	*	-	Affected	in	Cisco Search vendor "Cisco"	Wireless Lan Controller Software Search vendor "Cisco" for product "Wireless Lan Controller Software"	7.3.101.0 Search vendor "Cisco" for product "Wireless Lan Controller Software" and version "7.3.101.0"	-	Affected
Cisco Search vendor "Cisco"	5500 Wireless Lan Controller Search vendor "Cisco" for product "5500 Wireless Lan Controller"	-	-	Affected	in	Cisco Search vendor "Cisco"	Wireless Lan Controller Software Search vendor "Cisco" for product "Wireless Lan Controller Software"	7.3.101.0 Search vendor "Cisco" for product "Wireless Lan Controller Software" and version "7.3.101.0"	-	Affected
Cisco Search vendor "Cisco"	7500 Wireless Lan Controller Search vendor "Cisco" for product "7500 Wireless Lan Controller"	-	-	Affected	in	Cisco Search vendor "Cisco"	Wireless Lan Controller Software Search vendor "Cisco" for product "Wireless Lan Controller Software"	7.3.101.0 Search vendor "Cisco" for product "Wireless Lan Controller Software" and version "7.3.101.0"	-	Affected
Cisco Search vendor "Cisco"	8500 Wireless Lan Controller Search vendor "Cisco" for product "8500 Wireless Lan Controller"	-	-	Affected	in	Cisco Search vendor "Cisco"	Wireless Lan Controller Software Search vendor "Cisco" for product "Wireless Lan Controller Software"	7.3.101.0 Search vendor "Cisco" for product "Wireless Lan Controller Software" and version "7.3.101.0"	-	Affected