Cisco Patches Critical WebEx Meetings Server Vulnerability

Cisco warned customers of 12 vulnerabilities across its product line this week, including a critical vulnerability in the software that powers its conferencing product, WebEx Meetings Server. The company stressed on Wednesday that version 2.6 of its WebEx Meetings Server is vulnerable to a remote...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in several products. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...

Cisco Unified Computing System Command Line Interface Privilege Escalation Vulnerability

A vulnerability in the command-line interface CLI of the Cisco Unified Computing System UCS Manager and UCS 6200 Series Fabric Interconnects could allow an authenticated, local attacker to access the underlying operating system with the privileges of the root user. The vulnerability is due to...

CVE-2016-1374: Improper Input Validation

The web framework in Cisco Unified Computing System UCS Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827...

PT-2016-4743

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Performance Manager versions 2.0.0 and earlier Description The issue allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request. Recommendations For Cisco Unified...

Cisco Unified Computing System Performance Manager Input Validation Vulnerability

Cisco Unified Computing System Manager provides unified, embedded management of hardware and software components within a computing system. Cisco Unified Computing System UCS Performance Manager does not validate the parameter values of HTTP GET requests, which can be exploited to perform...

Cisco Unified Computing System Performance Manager Input Validation Vulnerability

A vulnerability in the web framework of Cisco Unified Computing System UCS Performance Manager could allow an authenticated, remote attacker to execute arbitrary commands. The vulnerability is due to insufficient input validation performed on parameters that are passed via an HTTP GET request. An...

Cisco Releases Security Update

Cisco has released a security update to address a vulnerability in its Unified Computing System UCS Performance Manager. Exploitation of this vulnerability could allow an authenticated remote attacker to take control of an affected system. Users and administrators are encouraged to review the Cis...

Cisco Unified Computing System Platform Emulator Command Injection/Buffer Overflow Vulnerability (cisco-sa-20160414-ucspe1, cisco-sa-20160414-ucspe2)

Cisco Unified Computing System Platform Emulator is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco UCS Platform Emulator < 3.1(1ePE1) Multiple Vulnerabilities

According to its self-reported version number, the Cisco Unified Computing System UCS Platform Emulator running on the remote host is prior to 3.11ePE1. It is, therefore, affected by the following vulnerabilities : - A command injection vulnerability exists due to improper validation of...

The vulnerability of Cisco Nexus 7000 software allows a malicious actor to trigger buffer overflows.

The buffer overflow in the implementation of the Smart Call Home function in Cisco NX-OS for Cisco Unified Computing System UCS switches and Nexus devices, as well as in Cisco CG-OS for Cisco Connected Grid series 1000 routers, allows remote SMTP servers to execute arbitrary code using specially...

The vulnerability of the Cisco Unified Computing System Central’s centralized device management system allows a intruder to inject arbitrary Web or HTML code.

The vulnerability of the control interface of the Cisco Unified Computing System Central device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code by entering special parameters...

CVE-2016-1401

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

PT-2016-2116

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Central Software version 1.41a Description The issue is related to a cross-site scripting XSS vulnerability in the management interface. This vulnerability allows remote attackers to inject arbitrary web scri...

CVE-2016-1401: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Computing System UCS Central Software 1.41a allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy91250...

Cisco Unified Computing System Central Cross-Site Scripting Vulnerability

Cisco Unified Computing System UCS Central is a suite of software from Cisco that manages the Cisco UCS server domain. The software provides policy-based automation of servers to improve IT efficiency and centralized fault overview of rapid problem solving and other features. A cross-site scripti...

CVE-2016-1340

Cisco UCS Platform Emulator (UCSPE) versions 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 are affected by a heap-based buffer overflow when handling libclimeta.so filename arguments. Root cause: improper validation of the libclimeta.so filename, enabling local privilege escalation. Impact: local users can...

CVE-2016-1339: Improper Neutralization of Special Elements used in an OS Command

Cisco Unified Computing System UCS Platform Emulator 2.52TS4, 3.02cA, and 3.02cTS9 allows local users to gain privileges via crafted arguments on a ucspe-copy command line, aka Bug ID CSCux68832...

PT-2016-4720

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Platform Emulator versions 2.52TS4, 3.02cA, 3.02cTS9 Description The issue allows local users to gain privileges via crafted arguments on a ucspe-copy command line. Recommendations For version 2.52TS4, update...

CVE-2016-1340: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Cisco Unified Computing System UCS Platform Emulator 2.52TS4, 3.02cA, and 3.02cTS9 allows local users to gain privileges via crafted libclimeta.so filename arguments, aka Bug ID CSCux68837...