{"id":"CVE-2013-1177","aliases":["EUVD-2013-1217","GHSA-572w-grx8-4cg2"],"status":"published","title":"SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4...","description":"SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01143,"percentile":0.66929,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2013-04-18T18:00:00Z","modified":"2026-06-16T23:50:58Z","products":[{"vendor":"cisco","product":"network_admission_control_manager_and_server_system_software"}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1177"},{"url":"https://github.com/advisories/GHSA-572w-grx8-4cg2"}],"sources":{"cve":[{"id":"CVE-2013-1177","description":"SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.","status":"published","published":"2013-04-18T18:00:00Z","modified":"2024-09-17T00:16:45.448Z","updated_at":"2026-11-02T14:34:58.534075Z"}],"euvd":[{"id":"EUVD-2013-1217","description":"SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.","status":"published","published":"2013-04-18T18:00:00Z","modified":"2024-09-17T00:16:45Z","updated_at":"2026-11-03T00:29:00.142007Z"}],"ghsa":[{"id":"GHSA-572w-grx8-4cg2","title":"SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4...","description":"SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.","status":"published","published":"2022-05-17T05:11:14Z","modified":"2023-01-28T05:03:24Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:43:58.488407Z"}],"nvd":[{"id":"CVE-2013-1177","description":"SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095.","status":"published","published":"2013-04-18T18:55:06.91Z","modified":"2026-06-16T23:50:58.34Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:02:25.704053Z"}]}}