CyberSec.Space Logo
Back to CVE Browser

CVE-2013-3383

CRITICAL
9.0
CVSS Severity Score
EPSS Score0.0110%
EPSS Percentile5.69th
PublishedJun 27, 2013
Last ModifiedApr 29, 2026

Vulnerability Description

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 before 7.7.0-550 allows remote authenticated users to execute arbitrary commands via crafted command-line input in a URL sent over IPv4, aka Bug ID CSCzv69294.

Affected Platforms (CPE)

💻
Cisco

Ironport Asyncos

<= 7.1.3
💻
Cisco

Ironport Asyncos

= 7.5
💻
Cisco

Ironport Asyncos

= 7.7

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-wsa
🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-wsa

Related Vulnerabilities

CVE-2016-64069.8

Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Secur...

CVE-2013-33849.0

The web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7.5.0-838, and 7.7 befo...

CVE-2013-33867.8

The IronPort Spam Quarantine (ISQ) component in the web framework in IronPort AsyncOS on Cisco Email Security Appliance devices be...

CVE-2013-33857.8

The management GUI in the web framework in IronPort AsyncOS on Cisco Web Security Appliance devices before 7.1.3-013, 7.5 before 7...