Vulnerability Details : CVE-2013-5556
The license-installation module on the Cisco Nexus 1000V switch 4.2(1)SV1(5.2b) and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.2(1)SM1(5.1) for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.2(1)VSG1(1) for Nexus 1000V switches allows local users to gain privileges and execute arbitrary commands via crafted "install all iso" arguments, aka Bug ID CSCui21340.
Products affected by CVE-2013-5556
- cpe:2.3:h:cisco:nexus_1000v:*:-:*:*:*:vmware_vsphere:*:*
- cpe:2.3:h:cisco:nexus_1000v:4.2\(1\)vsg1\(1\):-:*:*:*:nexus_1000v:*:*
- cpe:2.3:h:cisco:nexus_1000v:5.2\(1\)sm1\(5.1\):-:*:*:*:microsoft_hyper-v:*:*
- cpe:2.3:h:cisco:nexus_1000v:4.2\(1\)sv1\(5.1a\):-:*:*:*:vmware_vsphere:*:*
- cpe:2.3:h:cisco:nexus_1000v:4.2\(1\)sv1\(5.1\):-:*:*:*:vmware_vsphere:*:*
- cpe:2.3:h:cisco:nexus_1000v:4.2\(1\)_sv1\(4b\):-:*:*:*:vmware_vsphere:*:*
- cpe:2.3:h:cisco:nexus_1000v:4.2\(1\)_sv1\(4a\):-:*:*:*:vmware_vsphere:*:*
- cpe:2.3:h:cisco:nexus_1000v:4.2\(1\)sv1\(5.2\):-:*:*:*:vmware_vsphere:*:*
- cpe:2.3:h:cisco:nexus_1000v:4.2\(1\)_sv1\(4\):-:*:*:*:vmware_vsphere:*:*
Exploit prediction scoring system (EPSS) score for CVE-2013-5556
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 17 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-5556
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:L/AC:L/Au:S/C:C/I:C/A:C |
3.1
|
10.0
|
NIST |
CWE ids for CVE-2013-5556
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-5556
-
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5556
Cisco Nexus 1000V Series Switches Arbitrary Command Execution VulnerabilityVendor Advisory
-
http://tools.cisco.com/security/center/viewAlert.x?alertId=31774
Cisco Nexus 1000V Series Switches Arbitrary Command Execution VulnerabilityVendor Advisory
Jump to