CVE-2013-6810 describes a critical remote code execution vulnerability affecting Brocade Network Advisor versions prior to 12.1.0, including its use in EMC Connectrix Manager Converged Network Edition (CMCNE) and HP B-series SAN Network Advisor. This flaw allows unauthenticated remote attackers to upload and execute arbitrary files via a vulnerable servlet. With a CVSS score of 10.0, this vulnerability is highly severe, indicating a network-based attack with low complexity, requiring no authentication, and leading to complete compromise of confidentiality, integrity, and availability. Its EPSS score of 0.68652 and FAUCET Risk Score of 99/100 further highlight its significant risk. While not listed on the CISA KEV catalog, exploit intelligence indicates the existence of Metasploit modules (EDB-42701, EDB-42702) demonstrating practical remote code execution. Despite the availability of exploit code, there is minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
11.2.1CPE matchmatch criteria | cpe:2.3:a:emc:connectrix_manager:11.2.1:-:-:*:converged_network_edition:*:*:* | ||
12.0.1CPE matchmatch criteria | cpe:2.3:a:emc:connectrix_manager:12.0.1:-:-:*:converged_network_edition:*:*:* | ||
12.0.3CPE matchmatch criteria | cpe:2.3:a:emc:connectrix_manager:12.0.3:-:-:*:converged_network_edition:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.