CVE-2013-3443
N/A
Published: July 31, 2013 at 07:00 PM UTC
Updated: June 16, 2026 at 11:55 PM UTC
1 product affected across 1 vendorWide Area Application Services
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 6%
Description
The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
4.0.14.0.114.0.134.0.174.0.194.0.214.0.234.0.254.0.274.0.34.0.54.0.74.0.94.1.14.1.1 a4.1.1 b4.1.1 c4.1.1 d4.1.34.1.3 a4.1.3 b4.1.5 a4.1.5 b4.1.5 c4.1.5 d4.1.5 e4.1.5 f4.1.5 g4.1.74.1.7 a4.1.7 b4.2.14.2.34.2.3 a4.2.3 b4.2.3 c4.3.14.3.34.3.54.3.5 a4.4.14.4.34.4.3 a4.4.3 b4.4.3 c4.4.54.4.5 a4.4.5 b4.4.5 c4.4.5 d4.4.75.0.15.0.35.0.3 a5.0.3 c5.0.3 d5.1.15.1.1 a5.1.1 b5.2
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (7)
Vendor Advisoryx_refsource_CISCO
Source: [email protected]
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130731-waascmVDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/86121Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card