CVE-2013-1125

Severity Score

6.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services Manager does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CSCue46031, CSCue46035, and CSCue46042.

La interfaz en línea de comandos en Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, y Network Services Manager no validan correctamente las entradas, lo que permite a usuarios locales obtener privilegios de root mediante vectores no especificados, también conocido como Bugs IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CSCue46031, CSCue46035, and CSCue46042.

*Credits: N/A

CVSS Scores

NISTv2 6.8

Attack Vector

Local

Attack Complexity

Low

Authentication

Single

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-01-11 CVE Reserved
2013-02-19 CVE Published
2024-09-17 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-20: Improper Input Validation

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1125	2013-02-20

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Application Networking Manager Search vendor "Cisco" for product "Application Networking Manager"				-		-		Affected
Cisco Search vendor "Cisco"		Context Directory Agent Search vendor "Cisco" for product "Context Directory Agent"				-		-		Affected
Cisco Search vendor "Cisco"		Identity Services Engine Software Search vendor "Cisco" for product "Identity Services Engine Software"				-		-		Affected
Cisco Search vendor "Cisco"		Network Services Manager Search vendor "Cisco" for product "Network Services Manager"				-		-		Affected
Cisco Search vendor "Cisco"		Prime Collaboration Search vendor "Cisco" for product "Prime Collaboration"				-		-		Affected
Cisco Search vendor "Cisco"		Prime Lan Management Solution Search vendor "Cisco" for product "Prime Lan Management Solution"				-		-		Affected
Cisco Search vendor "Cisco"		Prime Network Control System Search vendor "Cisco" for product "Prime Network Control System"				-		-		Affected
Cisco Search vendor "Cisco"		Quad Search vendor "Cisco" for product "Quad"				-		-		Affected
Cisco Search vendor "Cisco"		Secure Access Control System Search vendor "Cisco" for product "Secure Access Control System"				-		-		Affected
Cisco Search vendor "Cisco"		Unified Provisioning Manager Search vendor "Cisco" for product "Unified Provisioning Manager"				-		-		Affected