Improper input validation in Cisco Virtualization Experience Client 6000

CVE-2013-5493

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.003 (23.4th percentile) — read the EPSS interpretation.

Affected products

Cisco Virtualization_experience_client_6000
Cisco Virtualization_experience_client_6000_series_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@cisco.com (x_refsource_OSVDB, vdb-entry)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)