Path Traversal in Cisco Wide Area Application Services Mobile
CVE-2013-5554
Directory traversal vulnerability in the web-management interface in the server in Cisco Wide Area Application Services (WAAS) Mobile before 3.5.5 allows remote attackers to upload and execute arbitrary files via a crafted POST request, aka Bug ID CSCuh69773.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.020 (79.0th percentile) — read the EPSS interpretation.
Affected products
- Cisco Wide_area_application_services_mobile — versions 3.3.1, 3.3.4, 3.4
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)