CVE-2020-3239

🗓️ 15 Apr 2020 20:10:30Reported by ciscoType

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device

Reporter	Title	Published	Views	Family All 11
Cisco	Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data	15 Apr 202016:00	–	cisco
Tenable Nessus	Cisco UCS Director and Cisco UCS Director Express for Big Data Multiple Vuulnerabilities (cisco-sa-ucsd-mult-vulns-UNfpdW4E)	21 Apr 202000:00	–	nessus
CNVD	Cisco UCS Director and Cisco UCS Director Express for Big Data Path Traversal Vulnerability (CNVD-2020-25345)	16 Apr 202000:00	–	cnvd
Check Point Advisories	Web Servers Memory Corruption Attempt (CVE-2020-12000; CVE-2020-13934; CVE-2020-3239; CVE-2020-9490)	28 Dec 202000:00	–	checkpoint_advisories
Cvelist	CVE-2020-3239 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data	15 Apr 202020:10	–	cvelist
NVD	CVE-2020-3239	15 Apr 202021:15	–	nvd
OSV	CVE-2020-3239	15 Apr 202021:15	–	osv
Prion	Directory traversal	15 Apr 202021:15	–	prion
ThreatPost	Cisco IP Phone Harbors Critical RCE Flaw	16 Apr 202018:49	–	threatpost
Vulnrichment	CVE-2020-3239 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data	15 Apr 202020:10	–	vulnrichment

NVD

Node

cisco ucs_directorMatch6.0.0.0

cisco ucs_directorMatch6.0.0.1

cisco ucs_directorMatch6.0.1.0

cisco ucs_directorMatch6.0.1.1

cisco ucs_directorMatch6.0.1.2

cisco ucs_directorMatch6.0.1.3

cisco ucs_directorMatch6.5.0.0

cisco ucs_directorMatch6.5.0.1

cisco ucs_directorMatch6.5.0.2

cisco ucs_directorMatch6.5.0.3

cisco ucs_directorMatch6.5.0.4

cisco ucs_directorMatch6.6.0.0

cisco ucs_directorMatch6.6.1.0

cisco ucs_directorMatch6.6.2.0

cisco ucs_directorMatch6.7.0.0

cisco ucs_directorMatch6.7.1.0

cisco ucs_directorMatch6.7.2.0

cisco ucs_directorMatch6.7.3.0

cisco ucs_director_express_for_big_dataRange≤3.7.3.0

[
  {
    "product": "Cisco UCS Director",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-mult-vulns-UNfpdW4E
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-539/

21 Nov 2024 05:30Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

CVSS 29

CVSS 39.8

EPSS0.38705

SSVC