EUVD-2016-2412

Malware in sbrugna...

CVE-2016-1404

Cisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances and Invicta Scaling System uses the same hardcoded GnuPG encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by sniffing network traffic to an Autosupport...

Hardcoded credentials

Cisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances and Invicta Scaling System uses the same hardcoded GnuPG encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by sniffing network traffic to an Autosupport...

CVE-2016-1404: Exposure of Sensitive Information to an Unauthorized Actor

Cisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances and Invicta Scaling System uses the same hardcoded GnuPG encryption key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by sniffing network traffic to an Autosupport...

PT-2016-4766

Name of the Vulnerable Software and Affected Versions Cisco UCS Invicta versions 4.3, 4.5, and 5.0.1 Description The issue allows remote attackers to defeat cryptographic protection mechanisms by sniffing network traffic to an Autosupport server and leveraging knowledge of a hardcoded GnuPG...

Code injection

Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294...

PT-2016-4703

Name of the Vulnerable Software and Affected Versions Cisco UCS Invicta C3124SA Appliance versions 4.3.1 through 5.0.1 UCS Invicta Scaling System and Appliance affected versions not specified Whiptail Racerunner affected versions not specified Description The issue is related to the improper...

CVE-2016-1313: Undefined Security Weakness

Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294...