Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-3383
HistoryJun 27, 2013 - 9:55 p.m.

CVE-2013-3383

2013-06-2721:55:06
CWE-94
[email protected]
web.nvd.nist.gov

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.3%

JSON

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL sent over IPv4, aka Bug ID CSCzv69294.

Affected configurations

NVD
Node
ciscoironport_asyncosRange≤7.1.3
OR
ciscoironport_asyncosMatch7.5
OR
ciscoironport_asyncosMatch7.7
AND
ciscoweb_security_applianceMatch-

Related

cve 1
prion 1
cvelist 1
cisco 2
nessus 1
cve
cve
CVE-2013-3383
2022-10-03 16:14:46
prion
prion
Command injection
2013-06-27 21:55:00
cvelist
cvelist
CVE-2013-3383
2022-10-03 16:14:46
cisco
cisco
Multiple Vulnerabilities in Cisco Web Security Appliance
2013-06-26 16:00:00
Multiple Vulnerabilities in Cisco Content Security Management Appliance
2013-06-26 16:00:00
nessus
nessus
Multiple Vulnerabilities in Cisco Web Security Appliance (cisco-sa-20130626-wsa)
2013-07-26 00:00:00

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.3%

JSON
Related for NVD:CVE-2013-3383
cve1prion1cvelist1cisco2nessus1