CVE-2013-1192
Critical
Description
The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802.
SeverityCritical
CVSS9.3
Exploit probability—
Product
Cisco Nexus
PublishedApr 25, 2013
First seenApr 25, 2013
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco nexus_5000 | No range specified | — |
| cisco adaptive_security_appliance_device_manager | v ≤ 5.2.5, 5.0.1, 5.0.2, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.1.1, 5.1.2, 5.2.1, 5.2.2, 5.2.3, 5.2.4 | — |
| cisco nexus_5010 | No range specified | — |
| cisco nexus_5010p_switch | No range specified | — |
| cisco nexus_5020 | No range specified | — |
| cisco nexus_5020p_switch | No range specified | — |
| cisco nexus_5548p | No range specified | — |
| cisco nexus_5548up | No range specified | — |
| cisco nexus_5596up | No range specified | — |
| cisco mds_9000 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.