Vulnerability in Cisco Firewall Services Module Software
CVE-2013-5506
The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or modify any context's configuration via unspecified commands, aka Bug ID CSCue46080.
EPSS: 0.003 (20.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Firewall_services_module_software — versions 4.0\(12\), 4.1(7), 3.1(12)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)