CVE Feed

    Dashboard / CVE / CVE-2013-1177

    CVE-2013-1177

    SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.

    Published:Apr 18, 2013
    Last Modified:Apr 11, 2025
    EPS:Apr 18, 2013
    EPSS Score:0.00366
    CVSS Score:7.5

    Affected Products

    Vendor
    Cisco
    Product
    Network Admission Control Manager And Server System Software

    Exploits

    No exploit reference

    Related CVEs

    CVE-2007-0057 (CVSS 10) — Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow …
    CVE-2007-0058 (CVSS 7.8) — Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allow…
    CVE-2006-4430 (CVSS 5) — The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation …
    CVE-2005-4825 (CVSS 5.7) — Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authenticat…
    CVE-2005-4332 (CVSS 9.4) — Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authenticat…
    CVE-2005-2631 (CVSS 7.5) — Cisco Clean Access (CCA) 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 does not properly authenticate use…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High