CVE-2019-1736: Improper Verification of Cryptographic Signature

A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass Unified Extensible Firmware Interface UEFI Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to improp...

PT-2020-1825

Name of the Vulnerable Software and Affected Versions Cisco UCS C-Series Rack Servers affected versions not specified Description A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass Unified Extensible Firmware Interface...

PT-2019-2365

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS C-Series Rack Servers affected versions not specified Description A vulnerability in the BIOS upgrade utility could allow an authenticated, local attacker to install compromised BIOS firmware on an affected...

CVE-2019-1880: Insufficient Verification of Data Authenticity

A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System UCS C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An...

CVE-2017-6633: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.00.234 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate-limiting protection. An attacker could exploit...

PT-2017-17202

Name of the Vulnerable Software and Affected Versions Cisco UCS C-Series Rack Servers version 3.00.234 Description A vulnerability in the TCP throttling process could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The issue is due to...

Cisco Unified Computing System on C-Series Rack Servers Cross-Frame Scripting Vulnerability

The Cisco Unified Computing System is an all-in-one platform for computing, virtualization, and networking. A cross-framework scripting vulnerability in Cisco Unified Computing System on C-Series Rack Servers allows attackers to hijack an attack via crafted website behavior...

CVE-2015-0599

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web...

CVE-2015-0599: Undefined Security Weakness

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web...