CVE-2013-1125 Privilege escalation in n/a
Local attackers can exploit improper input validation in the CLI to gain root privileges on various Cisco network management systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-1125?
CVE-2013-1125 is a medium-severity vulnerability in n/a, published on 19 Feb 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services Manager does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CSCue46031, CSCue46035, and CSCue46042.
Weakness: CWE-20
Which versions are affected by CVE-2013-1125?
It affects 10 products.
Products include Cisco Application Networking Manager, Cisco Context Directory Agent, Cisco Identity Services Engine Software, Cisco Network Services Manager, Cisco Prime Collaboration, Cisco Prime Lan Management Solution and 4 more.
How do I fix CVE-2013-1125?
No fix has been published for CVE-2013-1125 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-1125 being exploited?
There is no known exploitation of CVE-2013-1125 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-fj3m-94pr-x36q.