PT-2013-6122

CVE-2013-6810

·

Published

2013-12-12

·

Updated

2017-09-16

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Brocade Network Advisor versions prior to 12.1.0
Description The issue allows remote attackers to execute arbitrary code by using a servlet to upload an executable file. This is related to the FileUploadController Servlet in EMC Connectrix Manager Converged Network Edition.
Recommendations For versions prior to 12.1.0, update to version 12.1.0 or later to resolve the issue. As a temporary workaround, consider disabling the servlet functionality to minimize the risk of exploitation. Restrict access to the vulnerable servlets, such as UnifiedFileUploadMoreInfoServlet, BootFileUploadMoreInfoServlet, and SoftwareFileUploadMoreInfoServlet, to prevent remote code execution.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ZDI-13-278
ZDI-13-279
ZDI-13-280
ZDI-13-281
ZDI-13-282
ZDI-13-283
Found an issue in the description? Have something to add? Feel free to write us 👾