HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2013-5486

CVSS 10.0v2.0pub. 2013-09-23upd. 2026-04-29

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Cisco Prime Data Center Network Manager

    APP
    Cisco
    4.1\(2\)4.1\(3\)4.1\(4\)4.1\(5\)4.2\(1\)4.2\(3\)5.0\(2\)5.0\(3\)5.1\(1\)5.1\(2\)5.1\(3u\)5.2\(2\)5.2\(2a\)5.2\(2b\)5.2\(2c\)+ 4 more
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Path TraversalCommand Injection
CWE
References

Related vulnerabilities

CVE-2018-0258CRITICAL9.8PL ✓same product

Cisco Prime — path traversal i zdalne wykonanie kodu przez upload pliku

CVE-2017-6640CRITICAL9.8PL ✓same product

Cisco Prime DCNM — domyślne statyczne hasło umożliwia pełny dostęp administracyjny

CVE-2017-6639CRITICAL9.8PL ✓same product

RCE z uprawnieniami root w Cisco Prime DCNM — brak uwierzytelnienia narzędzia debug

CVE-2015-0666HIGH7.5⚠ KEVsame product

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) be...

CVE-2018-0464HIGH8.1same product

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to...