Cisco WAAS Mobile CVE-2013-5554 Remote Code Execution Vulnerability

Bugtraq ID:	63554
Class:	Input Validation Error
CVE:	CVE-2013-5554
Remote:	Yes
Local:	No
Published:	Nov 06 2013 12:00AM
Updated:	Dec 17 2013 12:18AM
Credit:	Andrea Micalizzi (aka rgod)
Vulnerable:
Not Vulnerable:

Cisco WAAS Mobile CVE-2013-5554 Remote Code Execution Vulnerability

Cisco WAAS Mobile is prone to a remote code-execution vulnerability.

Successful exploits will allow attackers to execute arbitrary code with the privileges of the application running the affected WAAS Mobile server. Failed exploit attempts may result in a denial-of-service condition.

This issue is being tracked by Cisco bug ID CSCuh69773.

Cisco WAAS Mobile CVE-2013-5554 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco WAAS Mobile CVE-2013-5554 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco WAAS Mobile CVE-2013-5554 Remote Code Execution Vulnerability

References:

• Cisco Homepage (Cisco)