NetSight
critical9.3

CVE-2013-1192

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to…

Impact

The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802.

Affected products

VendorProductAffected versions
CiscoAdaptive Security Appliance Device Manager
through 5.2.5
Versions 5.0.1, 5.0.2, 5.0.4, 5.0.5, 5.0.6
CiscoNexus 5000
All versions
CiscoNexus 5010
All versions
CiscoNexus 5010p Switch
All versions
CiscoNexus 5020
All versions
CiscoNexus 5020p Switch
All versions
CiscoNexus 5548p
All versions
CiscoNexus 5548up
All versions
CiscoNexus 5596up
All versions
CiscoMds 9000
All versions

Weakness classification

References