Lucene search

K
ciscoCiscoCISCO-SA-20150902-CIMCS
HistorySep 02, 2015 - 4:00 p.m.

Cisco Integrated Management Controller Supervisor and Cisco UCS Director Remote File Overwrite Vulnerability

2015-09-0216:00:00
tools.cisco.com
14

9.4 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:C/A:C

0.001 Low

EPSS

Percentile

45.5%

Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director contain a remote file overwrite vulnerability that could allow an unauthenticated, remote attacker to overwrite arbitrary system files, resulting in system instability or a denial of service (DoS) condition.

Cisco has released software updates that address this vulnerability.

Workarounds that mitigate this vulnerability are not available.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150902-cimcs”]

Affected configurations

Vulners
Node
ciscoucs_directorMatchany
OR
ciscointegrated_management_controller_supervisorMatchany
OR
ciscoucs_directorMatchany
OR
ciscointegrated_management_controller_supervisorMatchany

9.4 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:C/A:C

0.001 Low

EPSS

Percentile

45.5%

Related for CISCO-SA-20150902-CIMCS