CyberSec.Space Logo
Back to CVE Browser

CVE-2013-5530

CRITICAL
9.0
CVSS Severity Score
EPSS Score0.0900%
EPSS Percentile32.64th
PublishedOct 25, 2013
Last ModifiedApr 29, 2026

Vulnerability Description

The web framework in Cisco Identity Services Engine (ISE) 1.0 and 1.1.0 before 1.1.0.665-5, 1.1.1 before 1.1.1.268-7, 1.1.2 before 1.1.2.145-10, 1.1.3 before 1.1.3.124-7, 1.1.4 before 1.1.4.218-7, and 1.2 before 1.2.0.899-2 allows remote authenticated users to execute arbitrary commands via a crafted session on TCP port 443, aka Bug ID CSCuh81511.

Affected Platforms (CPE)

📦
Cisco

Identity Services Engine Software

= 1.0
📦
Cisco

Identity Services Engine Software

= 1.1
📦
Cisco

Identity Services Engine Software

= 1.1.1
📦
Cisco

Identity Services Engine Software

= 1.1.2
📦
Cisco

Identity Services Engine Software

= 1.1.3
📦
Cisco

Identity Services Engine Software

= 1.1.4
📦
Cisco

Identity Services Engine Software

= 1.2

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-ise
🔗 http://www.kb.cert.org/vuls/id/952422
🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-ise
🔗 http://www.kb.cert.org/vuls/id/952422

Related Vulnerabilities

CVE-2016-06358.8

Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2,...

CVE-2021-11347.4

A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could allow an un...

CVE-2019-16597.4

A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauth...

CVE-2013-11256.8

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking ...