A vulnerability was found in Cisco Unified Operations Manager (affected version not known). It has been declared as critical. This vulnerability affects some unknown functionality. The manipulation with an unknown input leads to a sql injection vulnerability. The CWE definition for the vulnerability is CWE-89. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud80179.

The weakness was presented 07/23/2013 as 30153 as confirmed vulnerability alert (Website). The advisory is shared for download at tools.cisco.com. This vulnerability was named CVE-2013-3437 since 05/06/2013. The exploitation appears to be easy. The attack can be initiated remotely. A single authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 12/26/2024). The MITRE ATT&CK project declares the attack technique as T1505.

The vulnerability scanner Nessus provides a plugin with the ID 102978 (Cisco Unified Operations Manager 8.6 SQL Injection Vulnerability), which helps to determine the existence of the flaw in a target environment. It is assigned to the family CGI abuses and running in the context r. The commercial vulnerability scanner Qualys is able to test this issue with plugin 12708 (Cisco Unified Operations Manager Unspecified SQL Injection Vulnerability).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (102978) and OSVDB (95472†). See VDB-64530 and VDB-64529 for similar entries. Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Cisco

Name

• Unified Operations Manager

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion