1. Home
  2. CVE Database
  3. CVE-2013-3080
HIGH · 9.0

CVE-2013-3080

VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of servic...

Vulnerability Description

VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service, by leveraging Virtual Appliance Management Interface (VAMI) web-interface access.

CVSS Score

9.0

HIGH

AV:N/AC:L/Au:S/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
VmwareVcenter Server Appliance5.1

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2013-3080?

CVE-2013-3080 is a vulnerability with a CVSS score of 9.0 (HIGH). VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of servic...

How severe is CVE-2013-3080?

CVE-2013-3080 has been rated HIGH with a CVSS base score of 9.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-3080?

Check the references section above for vendor advisories and patch information. Affected products include: Vmware Vcenter Server Appliance.