VulnerabilityModified
CVE-2013-5493
The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407.
MEDIUM 6.8EPSS 0.31%
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors, aka Bug ID CSCug68407.
- CVSS 2.0
- 6.8 MEDIUMAV:L/AC:L/Au:S/C:C/I:C/A:C
- EPSS
- 0.31% probability · 24th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/virtualization experience client 6000 · cisco/virtualization experience client 6000 series firmware
- Source
- psirt@cisco.com
References
- http://osvdb.org/97239
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5493Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30777Vendor Advisory
- http://www.securitytracker.com/id/1029032
- http://osvdb.org/97239
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5493Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30777Vendor Advisory
- http://www.securitytracker.com/id/1029032
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.