CVE-2013-1196 Privilege escalation in n/a
Local attackers can exploit improper input validation in Cisco network management CLIs to gain root privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-1196?
CVE-2013-1196 is a medium-severity vulnerability in n/a, published on 29 Apr 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management Solution (LMS), Prime Collaboration, Unified Provisioning Manager, Network Services Manager, Prime Data Center Network Manager (DCNM), and Quad does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCug29384, CSCug13866, CSCug29400, CSCug29406, CSCug29411, CSCug29413, CSCug29416, CSCug29418, CSCug29422, CSCug29425, and CSCug29426, a different issue than CVE-2013-1125.
Weakness: CWE-20
Which versions are affected by CVE-2013-1196?
It affects 11 products.
Products include Cisco Application Networking Manager, Cisco Context Directory Agent, Cisco Identity Services Engine Software, Cisco Network Services Manager, Cisco Prime Collaboration, Cisco Prime Data Center Network Manager and 5 more.
How do I fix CVE-2013-1196?
No fix has been published for CVE-2013-1196 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-1196 being exploited?
There is no known exploitation of CVE-2013-1196 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-2x3p-pc2g-c463.