Description
SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac
Scores
EPSS
0.0114
EPSS Percentile
63.3%
Details
CWE
CWE-89
Status
published
Products (6)
cisco/network_admission_control_manager_and_server_system_software
4.8.0
cisco/network_admission_control_manager_and_server_system_software
4.8.1
cisco/network_admission_control_manager_and_server_system_software
4.8.2
cisco/network_admission_control_manager_and_server_system_software
4.9.0
cisco/network_admission_control_manager_and_server_system_software
4.9.1
cisco/network_admission_control_manager_and_server_system_software
< 4.8.3
Published
Apr 18, 2013
Tracked Since
Feb 18, 2026