RCE in Cisco Application_and_content_networking_system_software
CVE-2013-3444
The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before…
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.042 (89.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco Application_and_content_networking_system_software — versions 4.1.3, 4.2.3, 4.2.5
- Cisco Enterprise_content_delivery_network_software — versions 2.0, 2.5.3, 2.5.5
- Cisco Internet_streamer_content_delivery_system — versions 2.0, 2.6, 3.1
- Cisco Videoscape_delivery_system_for_internet_streamer — versions 1.0.0, 3.2.0, 3.2.1
- Cisco Videoscape_delivery_system_origin_server — versions 1.0
- Cisco Videoscape_distribution_suite_optimization_engine — versions 1.0.0
- Cisco Videoscape_distribution_suite_service_broker — versions 1.0.0, 1.0.1, 1.1.0
- Cisco Wide_area_application_services — versions 4.1.1, 4.1.3, 4.1.5
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)