CVE-2013-3444

critical Cisco
CVSS v3 Base Score
9.0
AV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS Score
2.6%
Exploitation probability in 30 days
Top 14% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: August 1, 2013 (4668 days ago)
Last Modified: April 29, 2026
Vendor: Cisco
Source: NVD

Description

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.

CWE

CWE-78

Affected Products

cisco wide area application servicescisco application and content networking system softwarecisco enterprise content delivery network softwarecisco internet streamer content delivery systemcisco videoscape delivery system for internet streamercisco videoscape delivery system origin servercisco videoscape distribution suite optimization enginecisco videoscape distribution suite service broker

References

🔗 secunia.com 🔗 secunia.com 🔗 secunia.com 🔗 secunia.com 🔗 tools.cisco.com