CVE-2013-5506: Medium severity cisco firewall services module vulnerability
Published Oct 13, 2013
·Updated
The authorization functionality in Cisco Firewall Services Module (FWSM) 3.1.x and 3.2.x before 3.2(25) and 4.x before 4.1(13), when multiple-context mode is enabled, allows local users to read or modify any context's configuration via unspecified commands, aka Bug ID CSCue46080.
Affected Software
72 affected components
Cisco Firewall Services Module Software=3.1
Cisco Firewall Services Module Software=3.1\(2\)
Cisco Firewall Services Module Software=3.1\(3\)
Cisco Firewall Services Module Software=3.1\(4\)
Cisco Firewall Services Module Software=3.1\(5\)
Cisco Firewall Services Module Software=3.1\(6\)
Cisco Firewall Services Module Software=3.1\(7\)
Cisco Firewall Services Module Software=3.1\(8\)
Cisco Firewall Services Module Software=3.1\(9\)
Cisco Firewall Services Module Software=3.1\(10\)
Cisco Firewall Services Module Software=3.1\(11\)
Cisco Firewall Services Module Software=3.1\(12\)
Cisco Firewall Services Module Software=3.1\(13\)
Cisco Firewall Services Module Software=3.1\(14\)
Cisco Firewall Services Module Software=3.1\(15\)
Cisco Firewall Services Module Software=3.1\(16\)
Cisco Firewall Services Module Software=3.1\(17\)
Cisco Firewall Services Module Software=3.1\(18\)
Cisco Firewall Services Module Software=3.1\(19\)
Cisco Firewall Services Module Software=3.1\(20\)
Cisco Firewall Services Module Software=3.1\(21\)
Cisco Firewall Services Module Software=3.2
Cisco Firewall Services Module Software=3.2\(1\)
Cisco Firewall Services Module Software=3.2\(2\)
Cisco Firewall Services Module Software=3.2\(3\)
Cisco Firewall Services Module Software=3.2\(4\)
Cisco Firewall Services Module Software=3.2\(5\)
Cisco Firewall Services Module Software=3.2\(6\)
Cisco Firewall Services Module Software=3.2\(7\)
Cisco Firewall Services Module Software=3.2\(8\)
Cisco Firewall Services Module Software=3.2\(9\)
Cisco Firewall Services Module Software=3.2\(10\)
Cisco Firewall Services Module Software=3.2\(11\)
Cisco Firewall Services Module Software=3.2\(12\)
Cisco Firewall Services Module Software=3.2\(13\)
Cisco Firewall Services Module Software=3.2\(14\)
Cisco Firewall Services Module Software=3.2\(15\)
Cisco Firewall Services Module Software=3.2\(16\)
Cisco Firewall Services Module Software=3.2\(17\)
Cisco Firewall Services Module Software=3.2\(18\)
Cisco Firewall Services Module Software=3.2\(19\)
Cisco Firewall Services Module Software=3.2\(20\)
Cisco Firewall Services Module Software=3.2\(21\)
Cisco Firewall Services Module Software=3.2\(22\)
Cisco Firewall Services Module Software=4.0
Cisco Firewall Services Module Software=4.0\(1\)
Cisco Firewall Services Module Software=4.0\(2\)
Cisco Firewall Services Module Software=4.0\(3\)
Cisco Firewall Services Module Software=4.0\(4\)
Cisco Firewall Services Module Software=4.0\(5\)
Cisco Firewall Services Module Software=4.0\(6\)
Cisco Firewall Services Module Software=4.0\(7\)
Cisco Firewall Services Module Software=4.0\(8\)
Cisco Firewall Services Module Software=4.0\(10\)
Cisco Firewall Services Module Software=4.0\(11\)
Cisco Firewall Services Module Software=4.0\(12\)
Cisco Firewall Services Module Software=4.0\(13\)
Cisco Firewall Services Module Software=4.0\(14\)
Cisco Firewall Services Module Software=4.0\(15\)
Cisco Firewall Services Module Software=4.1
Cisco Firewall Services Module Software=4.1\(1\)
Cisco Firewall Services Module Software=4.1\(2\)
Cisco Firewall Services Module Software=4.1\(3\)
Cisco Firewall Services Module Software=4.1\(4\)
Cisco Firewall Services Module Software=4.1\(5\)
Cisco Firewall Services Module Software=4.1\(6\)
Cisco Firewall Services Module Software=4.1\(7\)
Cisco Firewall Services Module Software=4.1\(8\)
Cisco Firewall Services Module Software=4.1\(9\)
Cisco Firewall Services Module Software=4.1\(10\)
Cisco Firewall Services Module Software=4.1\(11\)
Cisco Firewall Services Module Software=4.1\(12\)
Event History
Oct 13, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5506?
CVE-2013-5506 is classified as a high-severity vulnerability due to its potential to allow unauthorized access to sensitive configuration settings.
2
How do I fix CVE-2013-5506?
To fix CVE-2013-5506, upgrade the Cisco Firewall Services Module to version 3.2(25) or later, or to 4.1(13) or later.
3
What systems are affected by CVE-2013-5506?
CVE-2013-5506 affects Cisco Firewall Services Module software versions 3.1.x, 3.2.x before 3.2(25), and 4.x before 4.1(13) when multiple-context mode is enabled.
4
What type of vulnerability is CVE-2013-5506?
CVE-2013-5506 is an authorization vulnerability that allows local users to read or modify configurations across different contexts.
5
Is there any workaround for CVE-2013-5506?
Cisco recommends upgrading the software to the specified versions as there are no effective workarounds available to mitigate CVE-2013-5506.