CVE-2021-1354: Improper Certificate Validation

A vulnerability in the certificate registration process of Cisco Unified Computing System UCS Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager UCSM. This vulnerability is due to improper certificate validation. An attacker...

PT-2019-2365

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS C-Series Rack Servers affected versions not specified Description A vulnerability in the BIOS upgrade utility could allow an authenticated, local attacker to install compromised BIOS firmware on an affected...

CVE-2019-1880: Insufficient Verification of Data Authenticity

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

CVE-2018-0338: Improper Input Validation

A vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System UCS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected system. The vulnerability exists because the affected software lacks proper input and validation...

PT-2018-8766

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Software affected versions not specified Description A vulnerability exists in the role-based access-checking mechanisms due to a lack of proper input and validation checks for certain file systems. This coul...

CVE-2018-0238: Improper Authentication

A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System UCS Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in the UCS Director end-user portal and perform any permitted operations on a...

PT-2018-8692

Name of the Vulnerable Software and Affected Versions: Cisco Unified Computing System UCS Director versions 6.0 through 6.5 prior to patch 3 Description: A vulnerability in the role-based resource checking functionality could allow an authenticated, remote attacker to view unauthorized informatio...

PT-2018-8680

Name of the Vulnerable Software and Affected Versions: Cisco Unified Computing System UCS Director affected versions not specified Description: A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack agains...

CVE-2018-0219: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Computing System UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2017-12243: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to obtain root shell privileges on the device, aka Command Injection. The...

PT-2017-3408

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager affected versions not specified Cisco Firepower 4100 Series Next-Generation Firewall NGFW affected versions not specified Cisco Firepower 9300 Security Appliance affected versions not specified...

PT-2017-1791

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 2.01.82 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 2.01.82 Cisco Firepower 9300 Security Appliance versions prior to 2.01.82 Description A...

CVE-2017-3817: Incorrect Authorization

A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System UCS Director could allow an authenticated, remote attacker to view unauthorized information for any virtual machine in a UCS domain. More Information: CSCvc32434. Known Affected Releases: 5.50.1...

PT-2017-16117

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Director versions 5.50.1 through 6.00.0 Description A vulnerability in the role-based resource checking functionality could allow an authenticated, remote attacker to view unauthorized information for any...

CVE-2017-6601: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61384...

CVE-2017-6602: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb66189...

CVE-2017-6600: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to perform a command injection attack. More Information: CSCvb61351...

PT-2017-1790

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 92.21.101 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.21.101 Description A...

PT-2017-1794

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 2.01.115 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.11.1658 Description A...

CVE-2017-6598: Missing Authorization

A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System UCS Manager, Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and Cisco Firepower 9300 Security Appliance could allow an authenticated, local attacker to execute arbitrary commands, aka Privilege...