CVE-2013-6975: Path Traversal
Published May 20, 2014
·Updated
Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217.
Affected Software
8 affected components
Cisco NX-OS<=6.2\(2a\)
Cisco NX-OS=6.0\(1\)
Cisco NX-OS=6.0\(2\)
Cisco NX-OS=6.1
Cisco NX-OS=6.1\(1\)
Cisco NX-OS=6.1\(2\)
Cisco NX-OS=6.1\(3\)
Cisco NX-OS=6.2\(2\)
Event History
May 20, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·11:13 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6975?
CVE-2013-6975 is considered a medium severity vulnerability due to its potential exploitation by local users.
2
How do I fix CVE-2013-6975?
To fix CVE-2013-6975, upgrade to a version of Cisco NX-OS that is later than 6.2(2a) and includes security patches.
3
Who is affected by CVE-2013-6975?
CVE-2013-6975 affects local users of Cisco NX-OS versions 6.2(2a) and earlier.
4
What type of vulnerability is CVE-2013-6975?
CVE-2013-6975 is a directory traversal vulnerability that allows unauthorized file access.
5
What kind of files can be accessed due to CVE-2013-6975?
CVE-2013-6975 could allow local users to read arbitrary files on the affected systems.