What is the CVSS score of CVE-2013-1125?

CVE-2013-1125 has a CVSS 2.0 base score of 6.8 (Medium). CVSS vector: AV:L/AC:L/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 0.5%.

Application Networking Manager CVE-2013-1125

MEDIUM

Improper Input Validation (CWE-20)

2013-02-19 psirt@cisco.com

Information Disclosure Cisco Application Networking Manager Context Directory Agent Identity Services Engine Software Network Services Manager Prime Collaboration Prime Lan Management Solution Prime Network Control System Quad Secure Access Control System Unified Provisioning Manager

6.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:L/AC:L/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:S/C:C/I:C/A:C

Attack Vector

Local

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Feb 19, 2013 - 23:55 cve.org

MEDIUM 6.8

DescriptionCVE.org

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services Manager does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CSCue46031, CSCue46035, and CSCue46042.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-20. The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services Manager does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CSCue46031, CSCue46035, and CSCue46042. Affected products include: Cisco Application Networking Manager, Cisco Context Directory Agent, Cisco Identity Services Engine Software, Cisco Network Services Manager, Cisco Prime Collaboration.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.