CVE-2013-5488

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-09-12 · updated 2026-06-16
Weakness: CWE-20

Description

Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ component, which allows remote attackers to cause a denial of service (memory consumption) via simultaneous TCP sessions, aka Bug IDs CSCuh54766, CSCuh01267, CSCuh95976, and CSCuh95969.

Affected products

Cisco Prime LAN Management Solution: all versions
Cisco Security Manager: all versions
Cisco Unified Operations Manager: all versions
Cisco Unified Service Monitor: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5488
http://tools.cisco.com/security/center/viewAlert.x?alertId=30749
http://www.securityfocus.com/bid/62333
https://exchange.xforce.ibmcloud.com/vulnerabilities/87026
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5488
http://tools.cisco.com/security/center/viewAlert.x?alertId=30749
http://www.securityfocus.com/bid/62333
https://exchange.xforce.ibmcloud.com/vulnerabilities/87026

Get alerted when CVE-2013-5488 or the next vulnerability affects your stack