CVE-2018-0308

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. The vulnerability exists because the affected software insufficiently...

CVE-2018-0312

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition on an affected device. The vulnerability exists because the affected software...

CVE-2018-0291

A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol...

CVE-2018-0314

A vulnerability in the Cisco Fabric Services CFS component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability exists because the affected software insufficiently validates Cisco Fabric...

CVE-2018-0294

The CVE-2018-0294 issue is a local-authenticated vulnerability in Cisco FXOS/NX-OS write-erase handling. The affected software may fail to delete sensitive files when clearing device configuration and reloading, enabling an authenticated administrator to create an unauthorized admin account that ...

CVE-2018-0304

The CVE-2018-0304 issue affects Cisco FXOS/NX-OS Fabric Services. A vulnerability arises from insufficient validation of Cisco Fabric Services packet headers, enabling an unauthenticated, remote attacker to read memory, cause DoS, or execute arbitrary code as root by sending crafted Fabric Servic...

CVE-2018-0314

The CVE-2018-0314 entry describes a vulnerability in Cisco Fabric Services (CFS) used by Cisco FXOS Software and Cisco NX-OS Software that could let an unauthenticated remote attacker execute arbitrary code. The root cause is insufficient validation of Cisco Fabric Services packet headers during ...

CVE-2018-0304

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to read sensitive memory content, create a denial of service DoS condition, or execute arbitrary code as root. The vulnerability exists because th...

CVE-2018-0308

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition. The vulnerability exists because the affected software insufficiently...

Cisco FXOS Software and UCS Fabric Interconnect Web UI Denial of Service Vulnerability

A vulnerability in the web UI of Cisco FXOS and Cisco UCS Fabric Interconnect Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to incorrect input validation in the web UI. An attacker could exploit this vulnerabili...

Cisco FXOS Software and UCS Fabric Interconnect Arbitrary Code Execution Vulnerability

A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to incorrect input validation in the CLI parser subsystem. An attacker could...

Cisco 5000 Series Enterprise Network Compute System and Cisco UCS E-Series Servers BIOS Authentication Bypass Vulnerability

A vulnerability in BIOS authentication management of Cisco 5000 Series Enterprise Network Compute System and Cisco Unified Computing UCS E-Series Servers could allow an unauthenticated, local attacker to bypass the BIOS authentication and execute actions as an unprivileged user. The vulnerability...

Cisco FXOS, NX-OS, and UCS Manager Software Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Cisco Discovery Protocol formerly known as CDP subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an unauthenticated, adjacent attacker to create a denial of service DoS condition. The vulnerability is due to a failure t...

Cisco Integrated Management Controller Supervisor Software and UCS Director Software Cross-Site Scripting Vulnerability

Cisco Integrated Management Controller IMC Supervisor Software and UCS Director Software are both products of Cisco Corporation.Cisco Integrated Management Controller IMC Supervisor Software is a set of tools for managing UCS Unified Computing System. Cisco Integrated Management Controller IMC...

CVE-2018-0338

A vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System UCS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected system. The vulnerability exists because the affected software lacks proper input and validation...

CVE-2018-0338

A vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System UCS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected system. The vulnerability exists because the affected software lacks proper input and validation...

CVE-2018-0338

Summary: CVE-2018-0338 affects Cisco Unified Computing System (UCS) Software, where the role-based access-checking mechanisms fail to properly validate inputs for certain file systems. An authenticated, local attacker could exploit this by issuing crafted commands in the system’s CLI to cause oth...

PT-2018-8766

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Software affected versions not specified Description A vulnerability exists in the role-based access-checking mechanisms due to a lack of proper input and validation checks for certain file systems. This coul...

PT-2018-8646

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller Supervisor Software affected versions not specified Cisco UCS Director Software affected versions not specified Description: A stored cross-site scripting XSS issue exists due to insufficient validation ...

CVE-2018-0149: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow an authenticated, remote attacker to conduct a Document Object Model-based DOM-based, stored cross-site scripting XSS attack against a us...