PT-2015-1325

Name of the Vulnerable Software and Affected Versions Cisco UCS Central Software version 1.21a Description The issue allows local users to gain privileges for OS command execution via a crafted CLI parameter. This is due to the system's failure to neutralize special elements used in the OS comman...

Cisco UCS Central Software Command-Line Interface Command Injection Vulnerability

A vulnerability in the command-line interface CLI of Cisco UCS Central Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An...

Cisco UCS Central code execution

Code execution via web interface...

Cisco UCS Central Software Vulnerability

Cisco has released a security advisory to address a vulnerability in the web framework of Cisco Unified Computing System UCS Central Software. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to revie...

Cisco UCS Central Software Security Vulnerabilities Patched

Cisco has patched a serious remote code execution vulnerability in its Unified Computing System UCS Central software, a data center platform that integrates processing, networking, storage and virtualization into one system. “An attacker could exploit this vulnerability by sending a crafted HTTP...

CVE-2015-0701

Cisco UCS Central Software before 1.31a allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961...

Command injection

Cisco UCS Central Software before 1.31a allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961...

CVE-2015-0701

Cisco UCS Central Software before 1.31a allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961...

CVE-2015-0701

Cisco UCS Central Software versions prior to 1.3(1a) are affected by a command-execution vulnerability exposed via the web interface. The root cause is improper input validation in the web framework, allowing an unauthenticated, remote attacker to craft an HTTP request that executes arbitrary OS ...

Cisco UCS Central Software Arbitrary Command Execution Vulnerability

Cisco UCS Central Software is the United States of America Cisco Cisco, a combination of computing, virtualization and networking in one software platform. An arbitrary command execution vulnerability exists in Cisco UCS Central Software. The vulnerability allows an unauthenticated, remote attack...

CVE-2015-0701: Improper Input Validation

Cisco UCS Central Software before 1.31a allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961...

Cisco UCS Central Software Arbitrary Command Execution Vulnerability

A vulnerability in the web framework of Cisco UCS Central Software could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP...

PT-2015-1314

Name of the Vulnerable Software and Affected Versions Cisco UCS Central Software versions prior to 1.31a Description The issue is due to insufficient input validation in the web component of Cisco UCS Central, allowing remote attackers to execute arbitrary commands via a crafted HTTP request...

Design/Logic Flaw

The Integrated Management Controller IMC in Cisco Unified Computing System UCS 1.47h and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876...

CVE-2015-0633

The Integrated Management Controller IMC in Cisco Unified Computing System UCS 1.47h and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876...

CVE-2015-0633

The CVE-2015-0633 issue affects Cisco Unified Computing System (UCS) C-Series servers’ Integrated Management Controller (IMC). The vulnerability arises from insufficient input validation of DHCP response packets, enabling an unauthenticated, adjacent attacker on the local network to bypass intend...

CVE-2015-0633: Improper Input Validation

The Integrated Management Controller IMC in Cisco Unified Computing System UCS 1.47h and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876...

PT-2015-4773

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.47h and earlier Description The issue allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network. Recommendations For Cisco Unified...

Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability

A vulnerability in the Cisco Integrated Management Controller IMC of Cisco Unified Computing System UCS C-Series Servers could allow an unauthenticated, adjacent attacker to access specific controls on the Cisco IMC on an affected device. The vulnerability is due to insufficient input validation...

CVE-2015-0599

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web...