Improper input validation in Cisco Application Networking Manager
CVE-2013-1196
The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management Solution (LMS), Prime Collaboration, Unified Provisioning Manager, Network Services Manager, Prime Data Center Network Manager (DCNM), and Quad does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCug29384, CSCug13866, CSCug29400, CSCug29406, CSCug29411, CSCug29413, CSCug29416, CSCug29418, CSCug29422, CSCug29425, and CSCug29426, a different issue than CVE-2013-1125.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (22.3th percentile) — read the EPSS interpretation.
Affected products
- Cisco Application_networking_manager
- Cisco Context_directory_agent
- Cisco Identity_services_engine_software
- Cisco Network_services_manager
- Cisco Prime_collaboration
- Cisco Prime_data_center_network_manager
- Cisco Prime_lan_management_solution
- Cisco Prime_network_control_system
- Cisco Quad
- Cisco Secure_access_control_system
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)