CVE-2013-1192: cisco adaptive_security_appliance_device_manager Improper Input Validation
Vulnerability summary
CVE-2013-1192 is a high (CVSS 9.3) Improper Input Validation vulnerability in cisco adaptive_security_appliance_device_manager. EPSS estimates a 2.41% chance of exploitation in the next 30 days, higher than 83.8% of scored vulnerabilities.
Timeline
- 25-04-2013PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.41%
Chance of exploitation in the next 30 days
Percentile
84%
Versus all other CVEs
30-day change
0.00 pp
From 2.41% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco9 products
- adaptive_security_appliance_device_manager≤ 5.2.5 | 5.0.1 | 5.0.2 | 5.0.4 | 5.0.5 | 5.0.6 | 5.0.7 | 5.0.8 | 5.0.9 | 5.1.1 | 5.1.2 | 5.2.1 | 5.2.2 | 5.2.3 | 5.2.4
- nexus_5000na
- nexus_5010na
- nexus_5010p_switchna
- nexus_5020na
1 vendor · 9 products
References
1 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-fmdmVendor AdvisoryX Refsource CISCO