CVE-2013-5486

Related Files

Cisco Prime Data Center Network Manager Arbitrary File Upload

Posted Dec 3, 2013

Authored by rgod, juan vazquez | Site metasploit.com

This Metasploit module exploits a code execution flaw in Cisco Data Center Network Manager. The vulnerability exists in processImageSave.jsp, which can be abused through a directory traversal and a null byte injection to upload arbitrary files. The autodeploy JBoss application server feature is used to achieve remote code execution. This Metasploit module has been tested successfully on Cisco Prime Data Center Network Manager 6.1(2) on Windows 2008 R2 (64 bits).

tags | exploit, remote, arbitrary, code execution

systems | cisco, windows

advisories | CVE-2013-5486, OSVDB-97426

SHA-256 | a8b1e9381f38a27ba3bb8e6624bca069e80ca49aa765a1ba3132167371bfd9bd

Download | Favorite | View