cisco unified computing system software - vulnerabilities and exploits

(subscribe to this query)

NA

Cisco UCS Central Software prior to 1.3(1a) allows remote malicious users to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961.

Cisco Unified Computing System Central Software 1.2\\(1a\\)Cisco Unified Computing System Central Software 1.2\\(1d\\)Cisco Unified Computing System Central Software 1.2\\(1e\\)Cisco Unified Computing System Central Software 1.2\\(1f\\)Cisco Unified Computing System Central Software 1.0 Base Cisco Unified Computing System Central Software 1.1 Base

1 Article

NA

MCServer in the Cisco Management Controller in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (application crash) via invalid MCTools parameters, aka Bug ID CSCtg20734.

Cisco Unified Computing System 1.3\\(1m\\)Cisco Unified Computing System 1.3\\(1c\\)Cisco Unified Computing System 1.3 Base Cisco Unified Computing System 1.2\\(1d\\)Cisco Unified Computing System 1.3\\(1q\\)Cisco Unified Computing System 1.3\\(1o\\)Cisco Unified Computing System 1.0 Base Cisco Unified Computing System 1.1 Base Cisco Unified Computing System 1.4 Base Cisco Unified Computing System 1.4\\(1m\\)Cisco Unified Computing System 1.3\\(1y\\)Cisco Unified Computing System 1.3\\(1w\\)Cisco Unified Computing System 1.3\\(1t\\)Cisco Unified Computing System 1.3\\(1p\\)Cisco Unified Computing System 1.3\\(1n\\)Cisco Unified Computing System 1.2 Base Cisco Unified Computing System 1.0\\(2k\\)

NA

Cross-site scripting (XSS) vulnerability in a Flash component in Cisco Unified Computing System (UCS) Central allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud15430.

Cisco Unified Computing System Software -

NA

Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a malformed SNMP request to a Fabric Interconnect (FI) device, aka Bug ID CSCts32452.

Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.4\\(1j\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 2.0\\(1q\\)

NA

Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a malformed SNMP request to a Fabric Interconnect (FI) device, aka Bug ID CSCts32463.

Cisco Unified Computing System Infrastructure And Unified Computing System Software 1.4\\(1j\\)Cisco Unified Computing System Infrastructure And Unified Computing System Software 2.0\\(1q\\)

9.8

CVSSv3

An unspecified CGI script in Cisco FX-OS prior to 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager prior to 2.2(4b), 2.2(5) prior to 2.2(5a), and 3.0 prior to 3.0(2e) allows remote malicious users to execute arbitrary shell commands via a crafted H...

Cisco Firepower Extensible Operating System 1.1.1 Cisco Firepower Extensible Operating System 1.1\\(1.160\\)Cisco Firepower Extensible Operating System 1.1\\(1.86\\)Cisco Unified Computing System 3.0\\(1e\\)Cisco Unified Computing System 3.0\\(1d\\)Cisco Unified Computing System 2.2\\(3e\\)Cisco Unified Computing System 2.2\\(3d\\)Cisco Unified Computing System 2.2\\(1f\\)Cisco Unified Computing System 2.2\\(1e\\)Cisco Unified Computing System 2.1\\(1f\\)Cisco Unified Computing System 2.1\\(1e\\)Cisco Unified Computing System 1.3\\(1q\\)Cisco Unified Computing System 1.3\\(1p\\)Cisco Unified Computing System 1.4\\(4i\\)Cisco Unified Computing System 1.4\\(4g\\)Cisco Unified Computing System 1.4\\(4f\\)Cisco Unified Computing System 2.0\\(4d\\)Cisco Unified Computing System 2.0\\(4b\\)Cisco Unified Computing System 2.0\\(2m\\)Cisco Unified Computing System 2.0\\(1x\\)Cisco Unified Computing System 1.2 Base Cisco Unified Computing System 1.1 Base

7.8

CVSSv3

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) up to and including 3.0(2d) allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263.

Cisco Unified Computing System 2.2\\(1g\\)Cisco Unified Computing System 2.2\\(1h\\)Cisco Unified Computing System 2.2\\(3d\\)Cisco Unified Computing System 2.2\\(3e\\)Cisco Unified Computing System 3.0\\(1d\\)Cisco Unified Computing System 3.0\\(1e\\)Cisco Unified Computing System 2.2\\(1b\\)Cisco Unified Computing System 2.2\\(1c\\)Cisco Unified Computing System 2.2\\(1d\\)Cisco Unified Computing System 2.2\\(2e\\)Cisco Unified Computing System 2.2\\(3a\\)Cisco Unified Computing System 2.2\\(4b\\)Cisco Unified Computing System 2.2\\(4c\\)Cisco Unified Computing System 2.2 Base Cisco Unified Computing System 2.2\\(2c\\)a Cisco Unified Computing System 2.2\\(2c\\)Cisco Unified Computing System 2.2\\(2d\\)Cisco Unified Computing System 2.2\\(3f\\)Cisco Unified Computing System 2.2\\(3g\\)Cisco Unified Computing System 3.0\\(2c\\)Cisco Unified Computing System 3.0\\(2d\\)Cisco Unified Computing System 2.2\\(5b\\)a

NA

The Fabric Interconnect component in Cisco Unified Computing System (UCS) 2.0 allows remote malicious users to cause a denial of service (process crash) via an attempted SSH session, aka Bug ID CSCtt94543.

Cisco Unified Computing System Infrastructure And Unified Computing System Software 2.0\\(1q\\)

NA

Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote malicious users to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575.

Cisco Unified Computing System Central Software 1.3\\(0.1\\)

7.8

CVSSv3

A vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System (UCS) Software could allow an authenticated, local malicious user to execute arbitrary commands on an affected system. The vulnerability exists because the affected software lacks prope...

Cisco Unified Computing System 7.0\\(0\\)bz\\(0.46\\)Cisco Unified Computing System 9.0\\(100.20\\)b Cisco Unified Computing System 9.1\\(1.13\\)Cisco Unified Computing System 9.9\\(0.902\\)Cisco Unified Computing System 5.5\\(203\\)

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook