CVE-2012-0329 Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878.
HighCVSS 9.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource, aka Bug ID CSCts63878.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco digital media manager | <= 5.2.2 | No fix listed |
| cisco digital media manager | = 3.5 | No fix listed |
| cisco digital media manager | = 3.5(1) | No fix listed |
| cisco digital media manager | = 4.0 | No fix listed |
| cisco digital media manager | = 4.1(0)40 | No fix listed |
| cisco digital media manager | = 5.0 | No fix listed |
| cisco digital media manager | = 5.0.2 | No fix listed |
| cisco digital media manager | = 5.0.3 | No fix listed |
| cisco digital media manager | = 5.1 | No fix listed |
| cisco digital media manager | = 5.1.1 | No fix listed |
| cisco digital media manager | = 5.2.1 | No fix listed |
| cisco digital media manager | = 5.2.1.1 | No fix listed |
| cisco digital media manager | = 5.2.3 | No fix listed |
References
- 20120118 Cisco Digital Media Manager Privilege Escalation Vulnerability vendor-advisory
- 1026541 vdb-entry