CVE-2013-3444

Cisco WAAS <4.x, 5.x<5.0.3e, 5.1.x<5.1.1c, 5.2.x<5.2.1 Authenticated OS Command Injection

Title source: llm
STIX 2.1

Description

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1028852
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54367
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/86122
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54372
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/61543
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54370
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54369
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1028853

Scores

EPSS 0.0421
EPSS Percentile 89.7%

Details

CWE
CWE-78
Status published
Products (50)
cisco/application_and_content_networking_system_software 4.1.3
cisco/application_and_content_networking_system_software 4.2.3
cisco/application_and_content_networking_system_software 4.2.5
cisco/application_and_content_networking_system_software 4.2.7.3
cisco/application_and_content_networking_system_software 4.2.9.3
cisco/application_and_content_networking_system_software 4.2.11.5
cisco/application_and_content_networking_system_software 4.2.13.1
cisco/application_and_content_networking_system_software 5.0
cisco/application_and_content_networking_system_software 5.0.1
cisco/application_and_content_networking_system_software 5.0.3.5
... and 40 more
Published Aug 01, 2013
Tracked Since Feb 18, 2026