Cisco UCS Central Code Execution

The vulnerability of the web-component of the Cisco UCS Central device management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted HTTP request from a remote location...

Cisco UCS Central Privilege Escalation

The vulnerability of the Cisco UCS Central device management system exists because measures to neutralize the special elements used in the operating system command are not taken. Exploiting this vulnerability can allow a malicious actor, operating locally, to gain privileges necessary to execute...

CVE-2015-4183

Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...

Command injection

Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...

CVE-2015-4183

Cisco UCS Central Software 1.2(1a) contains a CLI command-injection vulnerability (CVE-2015-4183) due to insufficient input validation. An authenticated, local attacker could inject arbitrary commands and execute with elevated OS privileges by supplying crafted CLI parameters. Impact includes pot...

CVE-2015-4183

Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...

CVE-2015-4183: Improper Neutralization of Special Elements used in an OS Command

Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...

Cisco UCS Central Software Command Line Interface Command Injection Vulnerability

Cisco UCS Central Software is a U.S. Cisco Cisco company's computing, virtualization and networking in one software platform. A security vulnerability exists in the command line interface of Cisco UCS Central Software. An authenticated, local attacker can exploit this vulnerability to inject...

PT-2015-1325

Name of the Vulnerable Software and Affected Versions Cisco UCS Central Software version 1.21a Description The issue allows local users to gain privileges for OS command execution via a crafted CLI parameter. This is due to the system's failure to neutralize special elements used in the OS comman...

Cisco UCS Central Software Command-Line Interface Command Injection Vulnerability

A vulnerability in the command-line interface CLI of Cisco UCS Central Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An...

Cisco UCS Central code execution

Code execution via web interface...

Cisco UCS Central Software Vulnerability

Cisco has released a security advisory to address a vulnerability in the web framework of Cisco Unified Computing System UCS Central Software. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to revie...

Cisco UCS Central Software Security Vulnerabilities Patched

Cisco has patched a serious remote code execution vulnerability in its Unified Computing System UCS Central software, a data center platform that integrates processing, networking, storage and virtualization into one system. “An attacker could exploit this vulnerability by sending a crafted HTTP...

CVE-2015-0701

Cisco UCS Central Software before 1.31a allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961...

Command injection

Cisco UCS Central Software before 1.31a allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961...

CVE-2015-0701

Cisco UCS Central Software versions prior to 1.3(1a) are affected by a command-execution vulnerability exposed via the web interface. The root cause is improper input validation in the web framework, allowing an unauthenticated, remote attacker to craft an HTTP request that executes arbitrary OS ...

CVE-2015-0701

Cisco UCS Central Software before 1.31a allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961...

CVE-2015-0701: Improper Input Validation

Cisco UCS Central Software before 1.31a allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961...

Cisco UCS Central Software Arbitrary Command Execution Vulnerability

Cisco UCS Central Software is the United States of America Cisco Cisco, a combination of computing, virtualization and networking in one software platform. An arbitrary command execution vulnerability exists in Cisco UCS Central Software. The vulnerability allows an unauthenticated, remote attack...

Cisco UCS Central Software Arbitrary Command Execution Vulnerability

A vulnerability in the web framework of Cisco UCS Central Software could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP...