← Vulnerability feed

Vulnerability record · CVE-2013-1125 · published 19 February 2013

CVE-2013-1125: Cisco application networking manager improper input validation vulnerability

Cisco · Application Networking Manager

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services Manager does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CSCue46031, CSCue46035, and CSCue46042.

6.8 CVSS 2.0 Medium EPSS 0.30% · top 79.6% CWE-20 · Improper input validation
6.8CVSS 2.0 base score
0.30%EPSS exploitation probability, 30 days
NoNot in CISA KEV
10Affected product versions listed by NVD
2References
16 Jun 2026Last modified by NVD

Description

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services Manager does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCue46001, CSCud95790, CSCue46021, CSCue46025, CSCue46023, CSCue46058, CSCue46013, CSCue46031, CSCue46035, and CSCue46042.

AV:L/AC:L/Au:S/C:C/I:C/A:C

Affected products

10 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1125
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1125

Track CVE-2013-1125 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-3290Cisco identity services engine vulnerabilityCisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or pe…EPSS 2.3%10.0CVE-2009-0616Cisco application networking manager vulnerabilityCisco Application Networking Manager (ANM) before 2.0 uses default usernames and passwords, which makes it easier for remote attackers to access the …EPSS 2.1%10.0CVE-2009-0617Cisco application networking manager vulnerabilityCisco Application Networking Manager (ANM) before 2.0 uses a default MySQL root password, which makes it easier for remote attackers to execute arbit…EPSS 2.1%9.8CVE-2018-15389Cisco prime collaboration hard-coded credentials vulnerabilityA vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the…EPSS 1.5%9.8CVE-2018-0318Cisco prime collaboration improper authentication vulnerabilityA vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gai…EPSS 3.1%9.8CVE-2018-0319Cisco prime collaboration improper authentication vulnerabilityA vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to …EPSS 3.1%9.8CVE-2018-0320Cisco prime collaboration sql injection vulnerabilityA vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to execute …EPSS 4.0%9.8CVE-2018-0321Cisco prime collaboration improper authentication vulnerabilityA vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invo…EPSS 3.6%

Source: NIST National Vulnerability Database (record CVE-2013-1125), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.