Lucene search
HistoryOct 13, 2013 - 10:20 a.m.
CVE-2013-5506
CVSS2
6.6
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:S/C:C/I:C/A:C
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
5.1%
The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or modify any context’s configuration via unspecified commands, aka Bug ID CSCue46080.
Affected configurations
Node
ciscofirewall_services_module_softwareMatch3.1
ORciscofirewall_services_module_softwareMatch3.1\(2\)
ORciscofirewall_services_module_softwareMatch3.1\(3\)
ORciscofirewall_services_module_softwareMatch3.1\(4\)
ORciscofirewall_services_module_softwareMatch3.1\(5\)
ORciscofirewall_services_module_softwareMatch3.1\(6\)
ORciscofirewall_services_module_softwareMatch3.1\(7\)
ORciscofirewall_services_module_softwareMatch3.1\(8\)
ORciscofirewall_services_module_softwareMatch3.1\(9\)
ORciscofirewall_services_module_softwareMatch3.1\(10\)
ORciscofirewall_services_module_softwareMatch3.1\(11\)
ORciscofirewall_services_module_softwareMatch3.1\(12\)
ORciscofirewall_services_module_softwareMatch3.1\(13\)
ORciscofirewall_services_module_softwareMatch3.1\(14\)
ORciscofirewall_services_module_softwareMatch3.1\(15\)
ORciscofirewall_services_module_softwareMatch3.1\(16\)
ORciscofirewall_services_module_softwareMatch3.1\(17\)
ORciscofirewall_services_module_softwareMatch3.1\(18\)
ORciscofirewall_services_module_softwareMatch3.1\(19\)
ORciscofirewall_services_module_softwareMatch3.1\(20\)
ORciscofirewall_services_module_softwareMatch3.1\(21\)
ORciscofirewall_services_module_softwareMatch3.2
ORciscofirewall_services_module_softwareMatch3.2\(1\)
ORciscofirewall_services_module_softwareMatch3.2\(2\)
ORciscofirewall_services_module_softwareMatch3.2\(3\)
ORciscofirewall_services_module_softwareMatch3.2\(4\)
ORciscofirewall_services_module_softwareMatch3.2\(5\)
ORciscofirewall_services_module_softwareMatch3.2\(6\)
ORciscofirewall_services_module_softwareMatch3.2\(7\)
ORciscofirewall_services_module_softwareMatch3.2\(8\)
ORciscofirewall_services_module_softwareMatch3.2\(9\)
ORciscofirewall_services_module_softwareMatch3.2\(10\)
ORciscofirewall_services_module_softwareMatch3.2\(11\)
ORciscofirewall_services_module_softwareMatch3.2\(12\)
ORciscofirewall_services_module_softwareMatch3.2\(13\)
ORciscofirewall_services_module_softwareMatch3.2\(14\)
ORciscofirewall_services_module_softwareMatch3.2\(15\)
ORciscofirewall_services_module_softwareMatch3.2\(16\)
ORciscofirewall_services_module_softwareMatch3.2\(17\)
ORciscofirewall_services_module_softwareMatch3.2\(18\)
ORciscofirewall_services_module_softwareMatch3.2\(19\)
ORciscofirewall_services_module_softwareMatch3.2\(20\)
ORciscofirewall_services_module_softwareMatch3.2\(21\)
ORciscofirewall_services_module_softwareMatch3.2\(22\)
ORciscofirewall_services_module_softwareMatch4.0
ORciscofirewall_services_module_softwareMatch4.0\(1\)
ORciscofirewall_services_module_softwareMatch4.0\(2\)
ORciscofirewall_services_module_softwareMatch4.0\(3\)
ORciscofirewall_services_module_softwareMatch4.0\(4\)
ORciscofirewall_services_module_softwareMatch4.0\(5\)
ORciscofirewall_services_module_softwareMatch4.0\(6\)
ORciscofirewall_services_module_softwareMatch4.0\(7\)
ORciscofirewall_services_module_softwareMatch4.0\(8\)
ORciscofirewall_services_module_softwareMatch4.0\(10\)
ORciscofirewall_services_module_softwareMatch4.0\(11\)
ORciscofirewall_services_module_softwareMatch4.0\(12\)
ORciscofirewall_services_module_softwareMatch4.0\(13\)
ORciscofirewall_services_module_softwareMatch4.0\(14\)
ORciscofirewall_services_module_softwareMatch4.0\(15\)
ORciscofirewall_services_module_softwareMatch4.1
ORciscofirewall_services_module_softwareMatch4.1\(1\)
ORciscofirewall_services_module_softwareMatch4.1\(2\)
ORciscofirewall_services_module_softwareMatch4.1\(3\)
ORciscofirewall_services_module_softwareMatch4.1\(4\)
ORciscofirewall_services_module_softwareMatch4.1\(5\)
ORciscofirewall_services_module_softwareMatch4.1\(6\)
ORciscofirewall_services_module_softwareMatch4.1\(7\)
ORciscofirewall_services_module_softwareMatch4.1\(8\)
ORciscofirewall_services_module_softwareMatch4.1\(9\)
ORciscofirewall_services_module_softwareMatch4.1\(10\)
ORciscofirewall_services_module_softwareMatch4.1\(11\)
ORciscofirewall_services_module_softwareMatch4.1\(12\)
Related
cvelist
cvelist
CVE-2013-5506
2022-10-03 16:14:55
cisco
cisco
Cisco Firewall Services Module Command Authorization Vulnerability
2013-10-09 16:14:26
Multiple Vulnerabilities in Cisco Firewall Services Module Software
2013-10-09 16:00:00
prion
prion
Authorization
2013-10-13 10:20:00
cve
cve
CVE-2013-5506
2022-10-03 16:14:55
nessus
nessus
securityvulns
securityvulns
Cisco ASA / FWSM multiple security vulnerabilities
2013-10-13 00:00:00
CVSS2
6.6
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:S/C:C/I:C/A:C
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2013-5506