What is the CVSS score of CVE-2013-1192?

CVE-2013-1192 has a CVSS 2.0 base score of 9.3 (Critical). CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.8%.

Adaptive Security Appliance Device Manager CVE-2013-1192

CRITICAL

Improper Input Validation (CWE-20)

2013-04-25 psirt@cisco.com

Information Disclosure Microsoft Cisco Adaptive Security Appliance Device Manager Nexus 5000 Nexus 5010 Nexus 5010P Switch Nexus 5020 Nexus 5020P Switch Nexus 5548P Nexus 5548Up Nexus 5596Up Mds 9000

9.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Apr 25, 2013 - 10:55 cve.org

CRITICAL 9.3

DescriptionCVE.org

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802.

AnalysisAI

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802. Affected products include: Cisco Adaptive Security Appliance Device Manager, Cisco Nexus 5000, Cisco Nexus 5010, Cisco Nexus 5010P Switch, Cisco Nexus 5020. Version information: before 5.2.8.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.