Every CVE Search/ Get API key

CVE-2013-5522

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it...

6.8 Medium

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286.

Exploit likelihood

0.35%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286.

Record
CVE-2013-5522
CVSS 2.0
6.8 MediumAV:L/AC:L/Au:S/C:C/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286.

Record
CVE-2013-5522
Updated
2026-11-02
EUVDEUVD-2013-5362 No score

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286.

Record
EUVD-2013-5362
Updated
2026-11-03
GitHub AdvisoriesGHSA-7ghj-g7pr-256v No score

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it...

Cisco IOS on Catalyst 3750X switches has default Service Module credentials, which makes it easier for local users to gain privileges via a Service Module login, aka Bug ID CSCue92286.

Record
GHSA-7ghj-g7pr-256v
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-5522 is a medium vulnerability (CVSS 6.8) in Cisco Ios, published October 25, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.

References

MoveEnter Open