cisco unified computing system - vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) up to and including 3.0(2d) allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263.

Cisco Unified Computing System 2.2\\(1g\\)Cisco Unified Computing System 2.2\\(1h\\)Cisco Unified Computing System 2.2\\(3d\\)Cisco Unified Computing System 2.2\\(3e\\)Cisco Unified Computing System 3.0\\(1d\\)Cisco Unified Computing System 3.0\\(1e\\)Cisco Unified Computing System 2.2\\(1b\\)Cisco Unified Computing System 2.2\\(1c\\)Cisco Unified Computing System 2.2\\(1d\\)Cisco Unified Computing System 2.2\\(2e\\)Cisco Unified Computing System 2.2\\(3a\\)Cisco Unified Computing System 2.2\\(4b\\)Cisco Unified Computing System 2.2\\(4c\\)Cisco Unified Computing System 2.2 Base Cisco Unified Computing System 2.2\\(2c\\)a Cisco Unified Computing System 2.2\\(2c\\)Cisco Unified Computing System 2.2\\(2d\\)Cisco Unified Computing System 2.2\\(3f\\)Cisco Unified Computing System 2.2\\(3g\\)Cisco Unified Computing System 3.0\\(2c\\)Cisco Unified Computing System 3.0\\(2d\\)Cisco Unified Computing System 2.2\\(5b\\)a

9.8

CVSSv3

An unspecified CGI script in Cisco FX-OS prior to 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager prior to 2.2(4b), 2.2(5) prior to 2.2(5a), and 3.0 prior to 3.0(2e) allows remote malicious users to execute arbitrary shell commands via a crafted H...

Cisco Firepower Extensible Operating System 1.1.1 Cisco Firepower Extensible Operating System 1.1\\(1.160\\)Cisco Firepower Extensible Operating System 1.1\\(1.86\\)Cisco Unified Computing System 3.0\\(1e\\)Cisco Unified Computing System 3.0\\(1d\\)Cisco Unified Computing System 2.2\\(3e\\)Cisco Unified Computing System 2.2\\(3d\\)Cisco Unified Computing System 2.2\\(1f\\)Cisco Unified Computing System 2.2\\(1e\\)Cisco Unified Computing System 2.1\\(1f\\)Cisco Unified Computing System 2.1\\(1e\\)Cisco Unified Computing System 1.3\\(1q\\)Cisco Unified Computing System 1.3\\(1p\\)Cisco Unified Computing System 1.4\\(4i\\)Cisco Unified Computing System 1.4\\(4g\\)Cisco Unified Computing System 1.4\\(4f\\)Cisco Unified Computing System 2.0\\(4d\\)Cisco Unified Computing System 2.0\\(4b\\)Cisco Unified Computing System 2.0\\(2m\\)Cisco Unified Computing System 2.0\\(1x\\)Cisco Unified Computing System 1.2 Base Cisco Unified Computing System 1.1 Base

NA

The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor prior to 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) prior to 5.2.0.1 allows remote malicious users to write to arbitrary files via crafted HTTP reque...

Cisco Integrated Management Controller Supervisor Cisco Unified Computing System Director 4.0 Base Cisco Unified Computing System Director 5.0.0.0 Cisco Unified Computing System Director Cisco Unified Computing System Director 5.0.0.1 Cisco Unified Computing System Director 5.0.0.2 Cisco Unified Computing System Director 5.0.0.3 Cisco Unified Computing System Director 5.1.0.1 Cisco Unified Computing System Director 3.4 Base Cisco Unified Computing System Director 4.1 Base Cisco Unified Computing System Director 5.1.0.0

NA

MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters, aka Bug ID CSCtg20734.

Cisco Unified Computing System 1.3\\(1m\\)Cisco Unified Computing System 1.3\\(1c\\)Cisco Unified Computing System 1.3 Base Cisco Unified Computing System 1.2\\(1d\\)Cisco Unified Computing System 1.3\\(1q\\)Cisco Unified Computing System 1.3\\(1o\\)Cisco Unified Computing System 1.0 Base Cisco Unified Computing System 1.1 Base Cisco Unified Computing System 1.4 Base Cisco Unified Computing System 1.4\\(1m\\)Cisco Unified Computing System 1.3\\(1y\\)Cisco Unified Computing System 1.3\\(1w\\)Cisco Unified Computing System 1.3\\(1t\\)Cisco Unified Computing System 1.3\\(1p\\)Cisco Unified Computing System 1.3\\(1n\\)Cisco Unified Computing System 1.2 Base Cisco Unified Computing System 1.0\\(2k\\)

NA

Cisco UCS Central Software prior to 1.3(1a) allows remote malicious users to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961.

Cisco Unified Computing System Central Software 1.2\\(1a\\)Cisco Unified Computing System Central Software 1.2\\(1d\\)Cisco Unified Computing System Central Software 1.2\\(1e\\)Cisco Unified Computing System Central Software 1.2\\(1f\\)Cisco Unified Computing System Central Software 1.0 Base Cisco Unified Computing System Central Software 1.1 Base

1 Article

8.8

CVSSv3

The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and previous versions allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827.

Cisco Unified Computing System Performance Manager 2.0.0 Cisco Unified Computing System Performance Manager 1.1.1 Cisco Unified Computing System Performance Manager 1.1.0 Cisco Unified Computing System Performance Manager 1.0 Base

6.1

CVSSv3

A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote malicious user to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unif...

Cisco Unified Computing System 3.0\\(1c\\)Cisco Unified Computing System 2.2\\(8b\\)Cisco Unified Computing System 3.1\\(2c\\)b

NA

The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656.

Cisco Unified Computing System 1.0\\(2k\\)Cisco Unified Computing System 1.1\\(1m\\)Cisco Unified Computing System 1.1 Base Cisco Unified Computing System 1.0 Base

8.8

CVSSv3

A vulnerability in the web-based GUI of Cisco UCS Director 6.0.0.0 and 6.0.0.1 could allow an authenticated, local malicious user to execute arbitrary workflow items with just an end-user profile, a Privilege Escalation Vulnerability. The vulnerability is due to improper role-bas...

Cisco Unified Computing System Director 6.0.0.0 Cisco Unified Computing System Director 6.0.0.1

4.3

CVSSv3

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authenticated, remote malicious user to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Aff...

Cisco Unified Computing System Director 6.0.0.0 Cisco Unified Computing System Director 5.5.0.1

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook