What is the CVSS score of CVE-2013-1659?

CVE-2013-1659 has a CVSS 2.0 base score of 7.6 (High). CVSS vector: AV:N/AC:H/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 0.9%.

Vcenter Server CVE-2013-1659

HIGH

2013-02-22 cve@mitre.org

Buffer Overflow VMware Denial Of Service RCE Vcenter Server Vcenter Server Appliance ESXi

7.6

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.6 HIGH

AV:N/AC:H/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:H/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

High

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Feb 22, 2013 - 20:55 cve.org

HIGH 7.6

DescriptionCVE.org

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption) by modifying the client-server data stream.

AnalysisAI

Technical ContextAI

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Vcenter Server

View all

CVE-2015-2342 CRITICAL Act Now POC

10.0 Oct 12

The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not r

CVE-2021-22005 CRITICAL Act Now POC

9.8 Sep 23

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. Rated critical severity (CV

CVE-2021-21985 CRITICAL Emergency POC

9.8 May 26

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

CVE-2021-21972 CRITICAL Emergency POC

9.8 Feb 24

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. Rated critical sev

CVE-2024-37081 HIGH Act Now POC

7.8 Jun 18

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. Rated h

CVE-2021-22015 HIGH Act Now POC

7.8 Sep 23

The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and

CVE-2020-3952 CRITICAL Act Now POC

9.8 Apr 10

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Servi

CVE-2022-31680 CRITICAL Act Now POC

9.1 Oct 07

The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). Rated cri

CVE-2013-1405 CRITICAL Act Now

10.0 Feb 15

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0

CVE-2016-2078 MEDIUM This Month POC

6.1 Jun 08

Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before upd

CVE-2017-4923 CRITICAL Act Now

9.8 Aug 01

VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. Rated critical severity (C

CVE-2024-38813 CRITICAL Act Now

9.8 Sep 17

The vCenter Server contains a privilege escalation vulnerability. Rated critical severity (CVSS 9.8), this vulnerability

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2017-11882 HIGH POC

7.8

CVE-2010-3333 HIGH POC

7.8

CVE-2013-1659 vulnerability details – vuln.today

Back