What is the CVSS score of CVE-2013-5493?

CVE-2013-5493 has a CVSS 2.0 base score of 6.8 (Medium). CVSS vector: AV:L/AC:L/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 0.1%.

Virtualization Experience Client 6000 CVE-2013-5493

MEDIUM

Improper Input Validation (CWE-20)

2013-09-13 psirt@cisco.com

Authentication Bypass Cisco Virtualization Experience Client 6000 Virtualization Experience Client 6000 Series Firmware

6.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:L/AC:L/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:S/C:C/I:C/A:C

Attack Vector

Local

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Sep 13, 2013 - 14:10 cve.org

MEDIUM 6.8

DescriptionCVE.org

The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-20. The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407. Affected products include: Cisco Virtualization Experience Client 6000, Cisco Virtualization Experience Client 6000 Series Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.