« Volver al listado

CVE-2013-1232

Estado: ModificadaMedia (5)—

The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Cisco — Webex Meetings ServerCisco — Webex Node FOR ASR 1000 SeriesCisco — Webex Node FOR MCS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-1232",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-05-04T03:24:41.700",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1232",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1232",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252."
    },
    {
      "lang": "es",
      "value": "La implementación HTTP en Cisco WebEx Node para MCS, WebEx Meetings Server, y WebEx Node para ASR 1000 Series permite a atacantes remotos leer el contenido de las posiciones de memoria sin inicializar mediante una petición especialmente diseñada, también conocido como Bug IDs CSCue36672, CSCue31363, CSCuf17466 y CSCug61252."
    }
  ],
  "lastModified": "2026-06-16T23:51:03.740",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:webex_meetings_server:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FE5F3F6-C7AE-4384-B58D-F0506719E35C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:webex_node_for_asr_1000_series:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD79F097-29A0-48E5-AEC6-3237440A58F2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:webex_node_for_mcs:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F435B36-842E-4983-B6F9-8D7AD0D59FB4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}