{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-27T06:17:54.597","vulnerabilities":[{"cve":{"id":"CVE-2013-1177","sourceIdentifier":"psirt@cisco.com","published":"2013-04-18T18:55:06.910","lastModified":"2025-04-11T00:51:21.963","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en Network Admission Control Manager Cisco (NAC) antes de v4.8.3.1 y v4.9.x antes de v4.9.2 permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados, también conocido como Bug ID CSCub23095."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.3","matchCriteriaId":"B71D2DEF-D07C-4B35-B296-6E9330B4D2CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"5799E92B-6742-4AC2-ACF9-39398671EDE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"22C408C8-0415-4AAD-BBC8-EDD7A8AAD6F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"A5860E05-8DA2-48CE-85EE-1A8FA19545D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:4.9.0:*:*:*:*:*:*:*","matchCriteriaId":"E78679FF-8AFB-4119-A2E0-2AB8FCBB3A92"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:network_admission_control_manager_and_server_system_software:4.9.1:*:*:*:*:*:*:*","matchCriteriaId":"EEB3F516-D190-4987-ABAF-D2D4229AF03E"}]}]}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}