CVE-2013-1192

Published: Apr 25, 2013Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802.

Affected (24)

Products: Cisco: Nexus 5000, Nexus 5010, Nexus 5010p Switch, Nexus 5020, Nexus 5020p Switch, Nexus 5548p, Nexus 5548up, Nexus 5596up, Adaptive Security Appliance Device Manager, Mds 9000

10 products

Adaptive Security Appliance Device Manager

Mds 9000

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Cisco Nexus 5000	All versions
Cisco Nexus 5010	All versions
Cisco Nexus 5010p Switch	All versions
Cisco Nexus 5020	All versions
Cisco Nexus 5020p Switch	All versions
Cisco Nexus 5548p	All versions
Cisco Nexus 5548up	All versions
Cisco Nexus 5596up	All versions

Configuration B

16 vulnerable

Vulnerable Software	Affected Versions
Cisco Adaptive Security Appliance Device Manager	Up to 5.2.5
Cisco Adaptive Security Appliance Device Manager	Version 5.0.1
Cisco Adaptive Security Appliance Device Manager	Version 5.0.2
Cisco Adaptive Security Appliance Device Manager	Version 5.0.4
Cisco Adaptive Security Appliance Device Manager	Version 5.0.5
Cisco Adaptive Security Appliance Device Manager	Version 5.0.6
Cisco Adaptive Security Appliance Device Manager	Version 5.0.7
Cisco Adaptive Security Appliance Device Manager	Version 5.0.8
Cisco Adaptive Security Appliance Device Manager	Version 5.0.9
Cisco Adaptive Security Appliance Device Manager	Version 5.1.1
Cisco Adaptive Security Appliance Device Manager	Version 5.1.2
Cisco Adaptive Security Appliance Device Manager	Version 5.2.1
Cisco Adaptive Security Appliance Device Manager	Version 5.2.2
Cisco Adaptive Security Appliance Device Manager	Version 5.2.3
Cisco Adaptive Security Appliance Device Manager	Version 5.2.4
Cisco Mds 9000	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-fmdm

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-fmdm

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.