NetSight
IP …
critical9.0

CVE-2013-3444

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before …

Impact

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.

Affected products

VendorProductAffected versions
CiscoWide Area Application Services
Versions 4.1.1, 4.1.3, 4.1.5, 4.1.7, 4.3.1, 4.3.3
CiscoApplication And Content Networking System Software
Versions 4.1.3, 4.2.3, 4.2.5, 4.2.7.3, 4.2.9.3, 4.2.11.5
CiscoEnterprise Content Delivery Network Software
Versions 2.0, 2.5.3, 2.5.5
CiscoInternet Streamer Content Delivery System
Versions 2.0, 2.6, 3.1
CiscoVideoscape Delivery System For Internet Streamer
Versions 1.0.0, 3.2.0, 3.2.1
CiscoVideoscape Delivery System Origin Server
Version 1.0
CiscoVideoscape Distribution Suite Optimization Engine
Version 1.0.0
CiscoVideoscape Distribution Suite Service Broker
Versions 1.0.0, 1.0.1, 1.1.0

Weakness classification

CWE-78

References