Unscored CVE-2013-3443 EUVD-2013-3378GHSA-6h72-hh8m-p9h2

The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manage…

Published Jul 31, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626.

References

1028851 vdb-entry
54367 third-party-advisory
20130731 Cisco WAAS Central Manager Remote Code Execution Vulnerability vendor-advisory
61542 vdb-entry
54372 third-party-advisory
cisco-waas-cve2013443-code-exec(86121) vdb-entry
95877 vdb-entry