SQL Injection in Cisco Network Admission Control Manager And Server System Software
CVE-2013-1177
SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.
Vulnerability class: SQL Injection
EPSS: 0.011 (63.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Network_admission_control_manager_and_server_system_software — versions 4.8.0, 4.8.1, 4.8.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)