Vulnerability Description
Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ component, which allows remote attackers to cause a denial of service (memory consumption) via simultaneous TCP sessions, aka Bug IDs CSCuh54766, CSCuh01267, CSCuh95976, and CSCuh95969.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Prime Lan Management Solution | - |
| Cisco | Security Manager | All versions |
| Cisco | Unified Operations Manager | - |
| Cisco | Unified Service Monitor | - |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5488Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30749
- http://www.securityfocus.com/bid/62333
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87026
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5488Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30749
- http://www.securityfocus.com/bid/62333
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87026
FAQ
What is CVE-2013-5488?
CVE-2013-5488 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact wit...
How severe is CVE-2013-5488?
CVE-2013-5488 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-5488?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Prime Lan Management Solution, Cisco Security Manager, Cisco Unified Operations Manager, Cisco Unified Service Monitor.