« Volver al listado

CVE-2013-1177

Estado: ModificadaAlta (7.5)—

SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Network Admission Control Manager AND Server System Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-1177",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-04-18T18:55:06.910",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de inyección SQL en Network Admission Control Manager Cisco (NAC) antes de v4.8.3.1 y v4.9.x antes de v4.9.2 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados, también conocido como Bug ID CSCub23095."
    }
  ],
  "lastModified": "2026-06-16T23:50:58.340",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B71D2DEF-D07C-4B35-B296-6E9330B4D2CC",
              "versionEndIncluding": "4.8.3"
            },
            {
              "criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:4.8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5799E92B-6742-4AC2-ACF9-39398671EDE5"
            },
            {
              "criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:4.8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "22C408C8-0415-4AAD-BBC8-EDD7A8AAD6F1"
            },
            {
              "criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:4.8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5860E05-8DA2-48CE-85EE-1A8FA19545D0"
            },
            {
              "criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:4.9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E78679FF-8AFB-4119-A2E0-2AB8FCBB3A92"
            },
            {
              "criteria": "cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:4.9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEB3F516-D190-4987-ABAF-D2D4229AF03E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}