PT-2021-1918

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System Central Software affected versions not specified Description A vulnerability in the certificate registration process could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing...

Cisco NX-OS Cryptographic Signature Bypass

The vulnerability of the NX-OS operating system of the Cisco Unified Computing System Central device management system is related to incorrect verification of the cryptographic signature of data. Exploiting this vulnerability could allow an attacker to bypass the signature verification and downlo...

Cisco Firepower Extensible Command Injection

The vulnerability of the Cisco Firepower Extensible Operating System’s local management component and the Cisco Unified Computing System Central’s centralized device management system exists due to the lack of measures taken to neutralize special elements used in operating system commands...

PT-2017-1793

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System versions prior to 92.21.105 Cisco Unified Computing System Central versions prior to 2.11.69 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions 2.01.68 through 3.11kA Description The...

PT-2017-1789

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System versions prior to 2.11.38 Cisco Unified Computing System Central versions prior to 2.11.38 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 2.11.38 Cisco Firepower 9300...

Cisco Unified Computing System Central Web Injection

The vulnerability of the control interface of the Cisco Unified Computing System Central device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code by entering special parameters...

Cisco UCS Central File Read

The vulnerability of the Cisco UCS Central operating system’s web framework exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially crafted HTTP request...