PT-2013-2950

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions prior to 1.02h Cisco Unified Computing System UCS versions 1.1 prior to 1.11j Cisco Unified Computing System UCS version 1.3x Description The issue allows remote attackers to bypass LDAP authenticati...

PT-2013-2953

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.x through 2.02m Description The issue allows remote attackers to obtain sensitive information by reading a technical-support bundle file or on-device configuration backup. Recommendations For...

PT-2013-2952

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.x before 1.21b Description The issue affects the management API in the XML API management service of the Manager component, allowing remote attackers to cause a denial of service via a malformed...

PT-2013-2954

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.x before 1.44 Cisco Unified Computing System UCS versions 2.x before 2.02m Description The issue allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco...

Cisco Releases Security Advisories

Cisco has released three security advisories to address vulnerabilities affecting Cisco NX-OS-based products, Cisco Device Manager, and Cisco Unified Computing System. These vulnerabilities may allow an attacker to bypass authentication controls, execute arbitrary code, obtain sensitive...

CVE-2013-1182: Undefined Security Weakness

The login page in the Web Console in the Manager component in Cisco Unified Computing System UCS before 1.02h, 1.1 before 1.11j, and 1.3x allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207...

CVE-2013-1183: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Intelligent Platform Management Interface IPMI functionality in the Manager component in Cisco Unified Computing System UCS 1.0 and 1.1 before 1.11j and 1.2 before 1.21b allows remote attackers to execute arbitrary code via malformed data in a UDP packet, aka Bug ID...

CVE-2013-1184: Improper Input Validation

The management API in the XML API management service in the Manager component in Cisco Unified Computing System UCS 1.x before 1.21b allows remote attackers to cause a denial of service service outage via a malformed request, aka Bug ID CSCtg48206...

CVE-2013-1186: Improper Authentication

Cisco Unified Computing System UCS 1.x before 1.44 and 2.x before 2.02m allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller IMC, aka Bug ID CSCts53746...

CVE-2013-1185: Exposure of Sensitive Information to an Unauthorized Actor

The web interface in the Manager component in Cisco Unified Computing System UCS 1.x and 2.x before 2.02m allows remote attackers to obtain sensitive information by reading a 1 technical-support bundle file or 2 on-device configuration backup, aka Bug ID CSCtq86543...

PT-2013-2951

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.0 through 1.1 before 1.11j Cisco Unified Computing System UCS version 1.2 before 1.21b Description The issue is related to a buffer overflow in the Intelligent Platform Management Interface IPMI...

PT-2013-2949

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on Nexus 5500 devices versions 4.x through 5.x before 5.03N22 Cisco NX-OS on Nexus 3000 devices versions 5.x before 5.03U32 Cisco Unified Computing System UCS 6200 devices versions before 2.01w Description The issue allows remote...

Cisco Unified Computing System Fabric Interconnect SNMP Message Processing Denial of Service Vulnerability

Cisco Unified Computing System contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to errors in processing malicious Simple Network Management Protocol SNMP messages by the affected software. An...

CVE-2012-1339

The Fabric Interconnect component in Cisco Unified Computing System UCS 2.0 allows remote attackers to cause a denial of service process crash via an attempted SSH session, aka Bug ID CSCtt94543...

CVE-2012-1365

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32463...

CVE-2012-1364

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32452...

Cross site request forgery (csrf)

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32463...

PT-2012-3196

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS version 2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, via an attempted SSH session. Recommendations For Cisco Unified Computing System UCS versi...

PT-2012-3205

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.4 through 2.0 Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload, by sending a malformed SNMP request to a Fabric Interconnect device...

PT-2012-3206

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.4 through 2.0 Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload, by sending a malformed SNMP request to a Fabric Interconnect device...