{ "CVE_data_meta" : { "ASSIGNER" : "cve@mitre.org", "ID" : "CVE-2013-3444", "STATE" : "PUBLIC" }, "affects" : { "vendor" : { "vendor_data" : [ { "product" : { "product_data" : [ { "product_name" : "n/a", "version" : { "version_data" : [ { "version_value" : "n/a" } ] } } ] }, "vendor_name" : "n/a" } ] } }, "data_format" : "MITRE", "data_type" : "CVE", "data_version" : "4.0", "description" : { "description_data" : [ { "lang" : "eng", "value" : "The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790." } ] }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "eng", "value" : "n/a" } ] } ] }, "references" : { "reference_data" : [ { "name" : "20130731 Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products", "refsource" : "CISCO", "url" : "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-cm" }, { "name" : "61543", "refsource" : "BID", "url" : "http://www.securityfocus.com/bid/61543" }, { "name" : "1028852", "refsource" : "SECTRACK", "url" : "http://www.securitytracker.com/id/1028852" }, { "name" : "1028853", "refsource" : "SECTRACK", "url" : "http://www.securitytracker.com/id/1028853" }, { "name" : "54367", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/54367" }, { "name" : "54369", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/54369" }, { "name" : "54370", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/54370" }, { "name" : "54372", "refsource" : "SECUNIA", "url" : "http://secunia.com/advisories/54372" }, { "name" : "multiple-cisco-cve20133444-command-exec(86122)", "refsource" : "XF", "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/86122" } ] } }