CVE-2013-1177: SQL Injection
First published: Thu Apr 18 2013(Updated: )
SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Network Admission Control Manager And Server System Software | <=4.8.3 | |
| Cisco Network Admission Control Manager And Server System Software | =4.8.0 | |
| Cisco Network Admission Control Manager And Server System Software | =4.8.1 | |
| Cisco Network Admission Control Manager And Server System Software | =4.8.2 | |
| Cisco Network Admission Control Manager And Server System Software | =4.9.0 | |
| Cisco Network Admission Control Manager And Server System Software | =4.9.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- vendor/cisco
- canonical/cisco network admission control manager and server system software
- version/cisco network admission control manager and server system software/4.8.3
- version/cisco network admission control manager and server system software/4.8.0
- version/cisco network admission control manager and server system software/4.8.1
- version/cisco network admission control manager and server system software/4.8.2
- version/cisco network admission control manager and server system software/4.9.0
- version/cisco network admission control manager and server system software/4.9.1