CVE:CVE-2013-1192
CNNVD:CNNVD-201304-531
Cisco Security Device Manager是美国思科公司提供的全新图形化路由器管理工具。
Cisco Device Manager for Cisco MDS 9000设备5.2.8之前的版本；Cisco Device Manager for Cisco Nexus 5000设备中的JAR文件中存在漏洞。远程攻击者可通过特制的element-manager.jnlp文件利用该漏洞在Windows平台客户机器上执行任意命令。
solution:Upgrade cisco adaptive_security_appliance_device_manager to a higher version than 5.2.5,5.0.1,5.0.2,5.0.4,5.0.5,5.0.6,5.0.7,5.0.8,5.0.9,5.1.1,5.1.2,5.2.1,5.2.2,5.2.3,5.2.4,and avoid the version (,5.2.5],5.0.1,5.0.2,5.0.4,5.0.5,5.0.6,5.0.7,5.0.8,5.0.9,5.1.1,5.1.2,5.2.1,5.2.2,5.2.3,5.2.4; Upgrade cisco nexus_5000 to a higher version than -; Upgrade cisco nexus_5010 to a higher version than -; Upgrade cisco nexus_5010p_switch to a higher version than -; Upgrade cisco nexus_5020 to a higher version than -; Upgrade cisco nexus_5020p_switch to a higher version than -; Upgrade cisco nexus_5548p to a higher version than -; Upgrade cisco nexus_5548up to a higher version than -; Upgrade cisco nexus_5596up to a higher version than -; Upgrade cisco mds_9000 to a higher version than *