CVE-2020-3249

🗓️ 15 Apr 2020 20:10:52Reported by ciscoType

Vulnerabilities in Cisco UCS Director and UCS Director Express for Big Data, allowing remote attacker to bypass authentication or conduct directory traversal attacks.

Reporter	Title	Published	Views	Family All 10
Cisco	Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data	15 Apr 202016:00	–	cisco
Tenable Nessus	Cisco UCS Director and Cisco UCS Director Express for Big Data Multiple Vuulnerabilities (cisco-sa-ucsd-mult-vulns-UNfpdW4E)	21 Apr 202000:00	–	nessus
CNVD	Cisco UCS Director and Cisco UCS Director Express for Big Data Path Traversal Vulnerability (CNVD-2020-25350)	16 Apr 202000:00	–	cnvd
Check Point Advisories	Cisco UCS Director saveWindowsNetworkConfig Directory Traversal (CVE-2020-3249)	1 Sep 202000:00	–	checkpoint_advisories
Cvelist	CVE-2020-3249 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data	15 Apr 202020:10	–	cvelist
NVD	CVE-2020-3249	15 Apr 202021:15	–	nvd
Prion	Directory traversal	15 Apr 202021:15	–	prion
ThreatPost	Cisco IP Phone Harbors Critical RCE Flaw	16 Apr 202018:49	–	threatpost
Vulnrichment	CVE-2020-3249 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data	15 Apr 202020:10	–	vulnrichment
Zero Day Initiative	Cisco UCS Director saveWindowsNetworkConfig Directory Traversal Denial-of-Service Vulnerability	16 Apr 202000:00	–	zdi

NVD

Node

cisco ucs_directorMatch6.0.0.0

cisco ucs_directorMatch6.0.0.1

cisco ucs_directorMatch6.0.1.0

cisco ucs_directorMatch6.0.1.1

cisco ucs_directorMatch6.0.1.2

cisco ucs_directorMatch6.0.1.3

cisco ucs_directorMatch6.5.0.0

cisco ucs_directorMatch6.5.0.1

cisco ucs_directorMatch6.5.0.2

cisco ucs_directorMatch6.5.0.3

cisco ucs_directorMatch6.5.0.4

cisco ucs_directorMatch6.6.0.0

cisco ucs_directorMatch6.6.1.0

cisco ucs_directorMatch6.6.2.0

cisco ucs_directorMatch6.7.0.0

cisco ucs_directorMatch6.7.1.0

cisco ucs_directorMatch6.7.2.0

cisco ucs_directorMatch6.7.3.0

cisco ucs_director_express_for_big_dataRange≤3.7.3.0

[
  {
    "product": "Cisco UCS Director",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-mult-vulns-UNfpdW4E
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-544/

21 Nov 2024 05:30Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.5

CVSS 27.8

CVSS 39.8

EPSS0.26235

SSVC