CVE-2013-5493 Command injection in n/a
Local attackers can bypass access restrictions in the diagnostic module to execute arbitrary commands on Cisco VXC 6000 devices.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-5493?
CVE-2013-5493 is a medium-severity command injection vulnerability in n/a, published on 13 Sep 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407.
Weakness: CWE-20
Which versions are affected by CVE-2013-5493?
It affects 2 products.
Products include Cisco Virtualization Experience Client 6000, Cisco Virtualization Experience Client 6000 Series Firmware.
How do I fix CVE-2013-5493?
No fix has been published for CVE-2013-5493 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2013-5493 being exploited?
There is no known exploitation of CVE-2013-5493 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-f4mr-hxmj-wqjr.