CVE-2013-5663
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.
La característica App-ID cache en Palo Alto Networks PAN-OS anterior a 4.0.14, 4.1.x anterior a 4.1.11 y 5.0.x anterior a 5.0.2, permite a atacantes remotos evitar las políticas de seguridad establecidas a través de una petición que provoca un cacheo no válido, como se demostró mediante la identificación incorrecta del tráfico HTTP como tráfico SIP. Aka Ref ID 47195.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-08-31 CVE Reserved
- 2013-08-31 CVE Published
- 2024-07-21 EPSS Updated
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://cansecwest.com/csw11/Network%20Application%20FW%20vs.%20Contemporary%20Threats%20%28Brad%20Woodberg%20-%20Final%29.pptx | X_refsource_misc | |
| http://researchcenter.paloaltonetworks.com/2013/01/app-id-cache-pollution-update | X_refsource_confirm | |
| https://security.paloaltonetworks.com/CVE-2013-5663 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| http://pastie.org/pastes/5568186/text | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | <= 4.0.8 Search vendor "Paloaltonetworks" for product "Pan-os" and version " <= 4.0.8" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.0.0 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.0.0" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.0.1 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.0.1" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.0.2 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.0.2" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.0.3 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.0.3" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.0.4 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.0.4" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.0.5 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.0.5" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.0.6 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.0.6" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.0.7 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.0.7" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.0 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.0" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.1 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.1" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.2 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.2" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.3 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.3" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.4 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.4" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.5 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.5" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.6 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.6" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.7 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.7" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.8 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.8" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.8-h3 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.8-h3" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.9 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.9" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 4.1.10 Search vendor "Paloaltonetworks" for product "Pan-os" and version "4.1.10" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 5.0.0 Search vendor "Paloaltonetworks" for product "Pan-os" and version "5.0.0" | - |
Affected
| ||||||
| Paloaltonetworks Search vendor "Paloaltonetworks" | Pan-os Search vendor "Paloaltonetworks" for product "Pan-os" | 5.0.0-h1 Search vendor "Paloaltonetworks" for product "Pan-os" and version "5.0.0-h1" | - |
Affected
| ||||||