Cisco UCS Platform Emulator < 3.1(1ePE1) Multiple Vulnerabilities

According to its self-reported version number, the Cisco Unified Computing System UCS Platform Emulator running on the remote host is prior to 3.11ePE1. It is, therefore, affected by the following vulnerabilities : - A command injection vulnerability exists due to improper validation of...

Cisco Nexus 7000 Buffer Overflow

The buffer overflow in the implementation of the Smart Call Home function in Cisco NX-OS for Cisco Unified Computing System UCS switches and Nexus devices, as well as in Cisco CG-OS for Cisco Connected Grid series 1000 routers, allows remote SMTP servers to execute arbitrary code using specially...

CVE-2016-1401

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

CVE-2016-1401

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

CVE-2016-1401: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

PT-2016-2116

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software version 1.41a Description The issue is related to a cross-site scripting XSS vulnerability in the management interface. This vulnerability allows remote attackers to inject arbitrary web scri...

Cisco Unified Computing System Central Cross-Site Scripting Vulnerability

Cisco Unified Computing System UCS Central is a suite of software from Cisco that manages the Cisco UCS server domain. The software provides policy-based automation of servers to improve IT efficiency and centralized fault overview of rapid problem solving and other features. A cross-site scripti...

Cisco Unified Computing System Central Command Execution

The vulnerability of the Cisco Unified Computing System Central device’s centralized management system exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

CVE-2016-1339

Cisco Unified Computing System UCS Platform Emulator 2.52TS4, 3.02cA, and 3.02cTS9 allows local users to gain privileges via crafted arguments on a ucspe-copy command line, aka Bug ID CSCux68832...

CVE-2016-1340

Cisco UCS Platform Emulator (UCSPE) versions 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 are affected by a heap-based buffer overflow when handling libclimeta.so filename arguments. Root cause: improper validation of the libclimeta.so filename, enabling local privilege escalation. Impact: local users can...

CVE-2016-1340: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Cisco Unified Computing System UCS Platform Emulator 2.52TS4, 3.02cA, and 3.02cTS9 allows local users to gain privileges via crafted libclimeta.so filename arguments, aka Bug ID CSCux68837...

PT-2016-4720

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Platform Emulator versions 2.52TS4, 3.02cA, 3.02cTS9 Description The issue allows local users to gain privileges via crafted arguments on a ucspe-copy command line. Recommendations For version 2.52TS4, update...

CVE-2016-1339: Improper Neutralization of Special Elements used in an OS Command

Cisco Unified Computing System UCS Platform Emulator 2.52TS4, 3.02cA, and 3.02cTS9 allows local users to gain privileges via crafted arguments on a ucspe-copy command line, aka Bug ID CSCux68832...

Cisco Unified Computing System Platform Emulator Command Injection Vulnerability

A vulnerability in the Cisco Unified Computing System UCS Platform Emulator could allow an authenticated, local attacker to perform a command injection attack. The vulnerability occurs because the affected system improperly handles ucspe-copy command-line arguments. An attacker could exploit this...

Cisco Unified Computing System Platform Emulator Filename Argument Handling Buffer Overflow Vulnerability

A vulnerability in Cisco Unified Computing System UCS Platform Emulator could allow an authenticated, local attacker to trigger a heap-based buffer overflow on a targeted system. The vulnerability occurs because the affected system improperly handles libclimeta.so filename arguments. An attacker...

CVE-2016-1352

Cisco Unified Computing System UCS Central Software 1.31b and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856...

PT-2016-1744

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software versions 1.31b and earlier Description The issue allows remote attackers to execute arbitrary OS commands via a crafted HTTP request. This is due to the system's failure to neutralize special...

Cisco UCS Central Software Arbitrary Command Execution Vulnerability

Cisco UCS Central Software is the United States Cisco Cisco company's set of global Cisco UCS Unified Computing System resources for server management and monitoring solutions. A security vulnerability exists in Cisco UCS Central Software version 1.31b and earlier. Due to the program failing to...

CVE-2016-1352: Improper Neutralization of Special Elements used in an OS Command

Cisco Unified Computing System UCS Central Software 1.31b and earlier allows remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuv33856...

Cisco Unified Computing System Central Software Arbitrary Command Execution Vulnerability

A vulnerability in the web framework of Cisco Unified Computing System UCS Central Software could allow an unauthenticated, remote attacker to execute arbitrary commands on a targeted system. The vulnerability is due to improper input validation by the affected software. An attacker could exploit...