CVE-2013-5486
high · 10Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.
10
CVSS
76.0%
EPSS (exploit prob.)
100th
EPSS percentile
2013-09-23
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-78
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | prime_data_center_network_manager | 4.1(2) |
| cisco | prime_data_center_network_manager | 4.1(3) |
| cisco | prime_data_center_network_manager | 4.1(4) |
| cisco | prime_data_center_network_manager | 4.1(5) |
| cisco | prime_data_center_network_manager | 4.2(1) |
| cisco | prime_data_center_network_manager | 4.2(3) |
| cisco | prime_data_center_network_manager | 5.0(2) |
| cisco | prime_data_center_network_manager | 5.0(3) |
| cisco | prime_data_center_network_manager | 5.1(1) |
| cisco | prime_data_center_network_manager | 5.1(2) |
| cisco | prime_data_center_network_manager | 5.1(3u) |
| cisco | prime_data_center_network_manager | 5.2(2) |
| cisco | prime_data_center_network_manager | 5.2(2a) |
| cisco | prime_data_center_network_manager | 5.2(2b) |
| cisco | prime_data_center_network_manager | 5.2(2c) |
| cisco | prime_data_center_network_manager | 5.2(2e) |
| cisco | prime_data_center_network_manager | 6.1(1a) |
| cisco | prime_data_center_network_manager | 6.1(1b) |
| cisco | prime_data_center_network_manager | <= 6.1\(1b\) |
| cisco | prime_data_center_network_manager | 5.2(2e) |
| cisco | prime_data_center_network_manager | 6.1(1a) |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2013-5486