CVE-2020-3250 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

🗓️ 15 Apr 2020 20:10:57Reported by ciscoType

Cisco UCS Director and Express for Big Data - Multiple Vulnerabilities in REST API

Reporter	Title	Published	Views	Family All 17
0daydb	Cisco UCS Director Cloupia Script - Remote Code Execution	7 Jun 202012:52	–	0daydb
0day.today	Cisco UCS Director Cloupia Script Remote Code Execution Exploit	8 Jun 202000:00	–	zdt
BDU FSTEC	The vulnerability of the REST API interface for managing physical infrastructure and virtual environments in Cisco UCS Director and Cisco UCS Director Express for Big Data allows a attacker to trigger a service failure.	29 May 202000:00	–	bdu_fstec
Circl	CVE-2020-3250	4 Jun 202020:04	–	circl
Cisco	Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data	15 Apr 202016:00	–	cisco
Tenable Nessus	Cisco UCS Director and Cisco UCS Director Express for Big Data Multiple Vuulnerabilities (cisco-sa-ucsd-mult-vulns-UNfpdW4E)	21 Apr 202000:00	–	nessus
CNVD	Cisco UCS Director and Cisco UCS Director Express for Big Data Path Traversal Vulnerability (CNVD-2020-31979)	20 Apr 202000:00	–	cnvd
Check Point Advisories	Cisco UCS Director Directory Traversal (CVE-2020-3250)	10 May 202000:00	–	checkpoint_advisories
CVE	CVE-2020-3250	15 Apr 202020:10	–	cve
Metasploit	Cisco UCS Director Cloupia Script RCE	3 Jun 202003:13	–	metasploit

[
  {
    "product": "Cisco UCS Director",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-mult-vulns-UNfpdW4E
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-538/
packetstormsecurity	www.packetstormsecurity.com/files/157955/Cisco-UCS-Director-Cloupia-Script-Remote-Code-Execution.html

05 Jun 2020 19:06Current

9.8High risk

Vulners AI Score9.8

CVSS 39.8

EPSS0.89688

CWE-20