CVE-2013-3443 The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbit...
HighCVSS 10.0
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wide area application services | = 4.0.1 | No fix listed |
| cisco wide area application services | = 4.0.3 | No fix listed |
| cisco wide area application services | = 4.0.5 | No fix listed |
| cisco wide area application services | = 4.0.7 | No fix listed |
| cisco wide area application services | = 4.0.9 | No fix listed |
| cisco wide area application services | = 4.0.11 | No fix listed |
| cisco wide area application services | = 4.0.13 | No fix listed |
| cisco wide area application services | = 4.0.17 | No fix listed |
| cisco wide area application services | = 4.0.19 | No fix listed |
| cisco wide area application services | = 4.0.21 | No fix listed |
| cisco wide area application services | = 4.0.23 | No fix listed |
| cisco wide area application services | = 4.0.25 | No fix listed |
| cisco wide area application services | = 4.0.27 | No fix listed |
| cisco wide area application services | = 4.1.1 | No fix listed |
| cisco wide area application services | = 4.1.1-a | No fix listed |
| cisco wide area application services | = 4.1.1-b | No fix listed |
| cisco wide area application services | = 4.1.1-c | No fix listed |
| cisco wide area application services | = 4.1.1-d | No fix listed |
| cisco wide area application services | = 4.1.3 | No fix listed |
| cisco wide area application services | = 4.1.3-a | No fix listed |
| cisco wide area application services | = 4.1.3-b | No fix listed |
| cisco wide area application services | = 4.1.5-a | No fix listed |
| cisco wide area application services | = 4.1.5-b | No fix listed |
| cisco wide area application services | = 4.1.5-c | No fix listed |
| cisco wide area application services | = 4.1.5-d | No fix listed |
Show 35 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco wide area application services | = 4.1.5-e | No fix listed |
| cisco wide area application services | = 4.1.5-f | No fix listed |
| cisco wide area application services | = 4.1.5-g | No fix listed |
| cisco wide area application services | = 4.1.7 | No fix listed |
| cisco wide area application services | = 4.1.7-a | No fix listed |
| cisco wide area application services | = 4.1.7-b | No fix listed |
| cisco wide area application services | = 4.2.1 | No fix listed |
| cisco wide area application services | = 4.2.3 | No fix listed |
| cisco wide area application services | = 4.2.3-a | No fix listed |
| cisco wide area application services | = 4.2.3-b | No fix listed |
| cisco wide area application services | = 4.2.3-c | No fix listed |
| cisco wide area application services | = 4.3.1 | No fix listed |
| cisco wide area application services | = 4.3.3 | No fix listed |
| cisco wide area application services | = 4.3.5 | No fix listed |
| cisco wide area application services | = 4.3.5-a | No fix listed |
| cisco wide area application services | = 4.4.1 | No fix listed |
| cisco wide area application services | = 4.4.3 | No fix listed |
| cisco wide area application services | = 4.4.3-a | No fix listed |
| cisco wide area application services | = 4.4.3-b | No fix listed |
| cisco wide area application services | = 4.4.3-c | No fix listed |
| cisco wide area application services | = 4.4.5 | No fix listed |
| cisco wide area application services | = 4.4.5-a | No fix listed |
| cisco wide area application services | = 4.4.5-b | No fix listed |
| cisco wide area application services | = 4.4.5-c | No fix listed |
| cisco wide area application services | = 4.4.5-d | No fix listed |
| cisco wide area application services | = 4.4.7 | No fix listed |
| cisco wide area application services | = 5.0.1 | No fix listed |
| cisco wide area application services | = 5.0.3 | No fix listed |
| cisco wide area application services | = 5.0.3-a | No fix listed |
| cisco wide area application services | = 5.0.3-c | No fix listed |
| cisco wide area application services | = 5.0.3-d | No fix listed |
| cisco wide area application services | = 5.1.1 | No fix listed |
| cisco wide area application services | = 5.1.1-a | No fix listed |
| cisco wide area application services | = 5.1.1-b | No fix listed |
| cisco wide area application services | = 5.2 | No fix listed |
References
- 95877 vdb-entry
- 54367 third-party-advisory
- 54372 third-party-advisory
- 20130731 Cisco WAAS Central Manager Remote Code Execution Vulnerability vendor-advisory
- 61542 vdb-entry
- 1028851 vdb-entry
- cisco-waas-cve2013443-code-exec(86121) vdb-entry