CyberSec.Space Logo
Back to CVE Browser

CVE-2013-1177

HIGH
7.5
CVSS Severity Score
EPSS Score0.0720%
EPSS Percentile27.71th
PublishedApr 18, 2013
Last ModifiedApr 29, 2026

Vulnerability Description

SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.

Affected Platforms (CPE)

📦
Cisco

Network Admission Control Manager And Server System Software

<= 4.8.3
📦
Cisco

Network Admission Control Manager And Server System Software

= 4.8.0
📦
Cisco

Network Admission Control Manager And Server System Software

= 4.8.1
📦
Cisco

Network Admission Control Manager And Server System Software

= 4.8.2
📦
Cisco

Network Admission Control Manager And Server System Software

= 4.9.0
📦
Cisco

Network Admission Control Manager And Server System Software

= 4.9.1

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac
🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac

Related Vulnerabilities

CVE-2013-273610.0

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code o...

CVE-2013-332610.0

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11....

CVE-2013-273510.0

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code o...

CVE-2013-332710.0

Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11....