CVE-2013-5486

CRITICAL ⚠ Exploit

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the...

Affects 1 product across 1 vendor.

CVSS 2.010.0
EPSS76.0%
Percentile100th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
CWE Weakness Definitions
CWE-78: OS Command Injection

Attacker injects OS commands through application inputs passed to system() or equivalent calls, leading to arbitrary command execution.

Related Attack Patterns (CAPEC)
CAPEC-43 Exploiting Multiple Input Interpretation Layers
via CWE-78
CAPEC-108 Command Line Execution through SQL Injection
via CWE-78
CAPEC-6 Argument Injection
via CWE-78
CAPEC-15 Command Delimiters
via CWE-78
CAPEC-88 OS Command Injection
via CWE-78

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A directory traversal vulnerability in the processImageSave.jsp file of the DCNM-SAN Server in Cisco Prime Data Center Network Manager allows remote attackers to write arbitrary files, potentially leading to command execution.

BSID: BS-2013-GLOBAL-157553-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2013-5486?
A directory traversal vulnerability in the processImageSave.jsp file of the DCNM-SAN Server in Cisco Prime Data Center Network Manager allows remote attackers to write arbitrary files, potentially leading to command execution.
What is the CVSS score for CVE-2013-5486?
CVE-2013-5486 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 76.0%.
Is CVE-2013-5486 actively exploited?
Public exploit available for CVE-2013-5486. Exploitation risk elevated.
How do I remediate CVE-2013-5486?
Priority: IMMEDIATE. Advisory: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130918-dcnm PSIRT: [email protected]
What systems are affected by CVE-2013-5486?
CVE-2013-5486 affects Cisco Prime Data Center Network Manager.
Vulnerability Details
CVE IDCVE-2013-5486
BSIDBS-2013-GLOBAL-157553-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2013-09-23
Last Modified2026-06-16
ICS Relevance70%
Weakness (CWE)
OS Command Injection
Domains
NETWORK-INFRA
SourceNVD
Official Description

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is exploited by manipulating the 'chartid' parameter in the processImageSave.jsp file, which can be used to write files to arbitrary locations on the server. This can be further leveraged to execute arbitrary commands using the JBoss autodeploy functionality.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Cisco Prime Data Center Network Manager ≤ 6.1(1b)
Remediation
View Vendor Advisory →

Remediation Priority: IMMEDIATE

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 4770 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
Related CVEs affecting Cisco
CVE-2000-1054 10.0 Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlie... CVE-1999-0775 10.0 Cisco Gigabit Switch routers running IOS allow remote attackers to forward un... CVE-2003-1096 10.0 The Cisco LEAP challenge/response authentication mechanism uses passwords in ... CVE-2013-5511 10.0 The Adaptive Security Device Management (ASDM) remote-management feature in C... CVE-2018-0101 10.0 A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Ci...
View all Cisco CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →