CVE-2013-1192: The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for...

Security readout for executives and security teams

This flaw can let a remote attacker make a Windows administrator workstation run commands when Cisco Device Manager handles a crafted element-manager.jnlp file. The concern is not direct compromise of the switch, but compromise of client machines used to manage Cisco MDS 9000 or Nexus 5000 environments. Exposure is most likely where legacy Cisco Device Manager is still installed or launched from Windows admin workstations for MDS 9000 or Nexus 5000 device management. Environments that retired these tools or upgraded MDS Device Manager beyond 5.2.8 have lower likely exposure. Prioritize remediation if Cisco Device Manager is still used by storage or network administrators. Compromise of an admin workstation can create operational risk beyond the originally managed device, especially in legacy SAN or data-center environments. Mitigation focus: Upgrade Cisco Device Manager for MDS 9000 to 5.2.8 or later.; Review Cisco’s advisory for Nexus 5000 fixed-release guidance.; Remove obsolete Cisco Device Manager installations from administrator workstations..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.