PT-2013-1629

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue allows local users to execute arbitrary Baseboard Management Controller BMC commands by leveraging local, shell-level, or debug-level privileges at the...

PT-2013-1619

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the Baseboard Management Controller BMC in Cisco Unified Computing System UCS, which fails to properly handle SSH escape sequences. This allows...

PT-2013-1625

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the Intelligent Platform Management Interface IPMI implementation in the Blade Management Controller, which allows remote attackers to enumerate...

CVE-2012-4094: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System UCS allows remote attackers to cause a denial of service by reading and forging control messages associated with Smart Call Home reports, aka Bug ID CSCtl00198...

CVE-2012-4087: Improper Input Validation

A cluster setup script for fabric interconnect devices in Cisco Unified Computing System UCS allows remote attackers to execute arbitrary commands via invalid parameters, aka Bug ID CSCtg20793...

CVE-2012-4085: Improper Input Validation

The Intelligent Platform Management Interface IPMI implementation in the Blade Management Controller in Cisco Unified Computing System UCS allows remote attackers to enumerate valid usernames by observing IPMI interface responses, aka Bug ID CSCtg20761...

CVE-2012-4078: Improper Authentication

The Baseboard Management Controller BMC in Cisco Unified Computing System UCS does not properly handle SSH escape sequences, which allows remote authenticated users to bypass an unspecified authentication step via SSH port forwarding, aka Bug ID CSCtg17656...

CVE-2012-4073

The KVM subsystem in the client in Cisco Unified Computing System UCS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or modify KVM data, via a crafted certificate, aka Bug ID CSCte90332...

CVE-2012-4093

The Manager component in Cisco Unified Computing System UCS allows local users to cause a denial of service via an invalid Smart Call Home contact address, aka Bug ID CSCtl00186...

PT-2013-1621

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue allows local users to cause a denial of service, resulting in an application crash, by utilizing invalid MCTools parameters. Recommendations At the moment...

CVE-2012-4082: Improper Input Validation

MCTools in the Cisco Management Controller in Cisco Unified Computing System UCS allows local users to gain privileges by entering crafted command-line parameters on a Fabric Interconnect device, aka Bug ID CSCtg20749...

PT-2013-1623

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns multiple buffer overflows in the administrative web interface, allowing remote authenticated users to cause a denial of service through memory...

CVE-2012-4093: Improper Input Validation

The Manager component in Cisco Unified Computing System UCS allows local users to cause a denial of service via an invalid Smart Call Home contact address, aka Bug ID CSCtl00186...

CVE-2012-4072: Improper Input Validation

The KVM subsystem in Cisco Unified Computing System UCS relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327...

PT-2013-1613

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the KVM subsystem in Cisco Unified Computing System UCS, which relies on a hardcoded X.509 certificate. This allows man-in-the-middle attackers t...

PT-2013-1633

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue allows local users to cause a denial of service via an invalid Smart Call Home contact address. Recommendations At the moment, there is no information abo...

PT-2013-1615

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the Board Management Controller BMC in the Serial over LAN SoL subsystem, which relies on a hardcoded private key. This allows man-in-the-middle...

CVE-2012-4081: Improper Restriction of Operations within the Bounds of a Memory Buffer

MCServer in the Cisco Management Controller in Cisco Unified Computing System UCS allows local users to cause a denial of service application crash via invalid MCTools parameters, aka Bug ID CSCtg20734...

CVE-2012-4074: Undefined Security Weakness

The Board Management Controller BMC in the Serial over LAN SoL subsystem in Cisco Unified Computing System UCS relies on a hardcoded private key, which allows man-in-the-middle attackers to obtain sensitive information or modify the data stream by leveraging knowledge of this key, aka Bug ID...

CVE-2012-4073: Undefined Security Weakness

The KVM subsystem in the client in Cisco Unified Computing System UCS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers, and read or modify KVM data, via a crafted certificate, aka Bug ID CSCte90332...