Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2013-1232

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco WebEx是美国思科（Cisco）公司的一套Web会议工具，该工具可协助异地办公人员进行协调合作。WebEx服务包括Web会议、网真视频会议和企业即时消息(IM)等。 Cisco WebEx Node for MCS，WebEx Meetings Server，WebEx Node for ASR 1000 Series中的HTTP实现中存在漏洞。远程攻击者可通过特制的请求利用该漏洞读取未初始化内存中的内容。

AI Predicted 7.5 Difficulty: Easy EPSS 1.19% · P68
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2013-1232

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco WebEx Node for MCS和WebEx Meetings Server HTTP实现安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco WebEx是美国思科（Cisco）公司的一套Web会议工具，该工具可协助异地办公人员进行协调合作。WebEx服务包括Web会议、网真视频会议和企业即时消息(IM)等。 Cisco WebEx Node for MCS，WebEx Meetings Server，WebEx Node for ASR 1000 Series中的HTTP实现中存在漏洞。远程攻击者可通过特制的请求利用该漏洞读取未初始化内存中的内容。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2013-1232

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-1232

请登录查看更多情报信息。

Vendor Advisories for CVE-2013-1232 (1)

Same Patch Batch · n/a · 2013-05-04 · 3 CVEs total

CVE-2013-1235 Cisco Wireless LAN Controller 安全漏洞
CVE-2013-1240 Cisco Unified Communications Manager 命令行接口安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a