CVE-2013-5486 Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the ch...
HighCVSS 10.0
EPSS 76.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco prime data center network manager | = 4.1(2) | No fix listed |
| cisco prime data center network manager | = 4.1(3) | No fix listed |
| cisco prime data center network manager | = 4.1(4) | No fix listed |
| cisco prime data center network manager | = 4.1(5) | No fix listed |
| cisco prime data center network manager | = 4.2(1) | No fix listed |
| cisco prime data center network manager | = 4.2(3) | No fix listed |
| cisco prime data center network manager | = 5.0(2) | No fix listed |
| cisco prime data center network manager | = 5.0(3) | No fix listed |
| cisco prime data center network manager | = 5.1(1) | No fix listed |
| cisco prime data center network manager | = 5.1(2) | No fix listed |
| cisco prime data center network manager | = 5.1(3u) | No fix listed |
| cisco prime data center network manager | = 5.2(2) | No fix listed |
| cisco prime data center network manager | = 5.2(2a) | No fix listed |
| cisco prime data center network manager | = 5.2(2b) | No fix listed |
| cisco prime data center network manager | = 5.2(2c) | No fix listed |
| cisco prime data center network manager | = 5.2(2e) | No fix listed |
| cisco prime data center network manager | = 6.1(1a) | No fix listed |
| cisco prime data center network manager | = 6.1(1b) | No fix listed |
| cisco prime data center network manager | <= 6.1\(1b\) | No fix listed |
References
- 20130918 Multiple Vulnerabilities in Cisco Prime Data Center Network Manager vendor-advisory
- 30008 exploit third-party-advisory vdb-entry