CVE-2013-1170

HIGH 7.5CVE-2013-1170 · Published 11/04/2013 · updated 16/06/2026

In short

CVE-2013-1170 is a HIGH (CVSS 7.5) vulnerability affecting prime network control system software (cisco).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
prime network control system software cisco	`= 1.1`	No fix yet

Description

The Cisco Prime Network Control System (NCS) appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the configuration or cause a denial of service (service disruption) via unspecified vectors, aka Bug ID CSCtz30468.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-ncs · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free