1218 matches found
Command injection
The Manager component in Cisco Unified Computing System UCS 2.23b on B Blade Server devices allows local users to gain privileges for executing arbitrary CLI commands by leveraging access to the subordinate fabric interconnect, aka Bug ID CSCut32778...
CVE-2015-4279
CVE-2015-4279 affects Cisco UCS Manager (2.2(3b)) on B Blade Server devices. The vulnerability allows a local attacker who has access to a subordinate fabric interconnect to gain privileges and execute arbitrary CLI commands, according to the description (Bug CSCut32778). Connected CNVD/NVD recor...
CVE-2015-4279
The Manager component in Cisco Unified Computing System UCS 2.23b on B Blade Server devices allows local users to gain privileges for executing arbitrary CLI commands by leveraging access to the subordinate fabric interconnect, aka Bug ID CSCut32778...
CVE-2015-4259
The Integrated Management Controller on Cisco Unified Computing System UCS C servers with software 1.53 and 1.60.16 has a default SSL certificate, which makes it easier for man-in-the-middle attackers to bypass cryptographic protection mechanisms by leveraging knowledge of a private key, aka Bug...
Design/Logic Flaw
The Integrated Management Controller on Cisco Unified Computing System UCS C servers with software 1.53 and 1.60.16 has a default SSL certificate, which makes it easier for man-in-the-middle attackers to bypass cryptographic protection mechanisms by leveraging knowledge of a private key, aka Bug...
CVE-2015-4259
The Integrated Management Controller on Cisco Unified Computing System UCS C servers with software 1.53 and 1.60.16 has a default SSL certificate, which makes it easier for man-in-the-middle attackers to bypass cryptographic protection mechanisms by leveraging knowledge of a private key, aka Bug...
CVE-2015-4259
Cisco UCS C-Series Servers IMC exposes a default SSL certificate, enabling MITM attacks by an attacker with knowledge of the private key. Affected product: Integrated Management Controller on UCS C servers running 1.5(3) or 1.6(0.16). Root cause: use of a default certificate that bypasses cryptog...
The vulnerability of the Cisco UCS Central device’s centralized management system allows a perpetrator to gain privileges necessary to execute operating system commands.
The vulnerability of the Cisco UCS Central device management system exists because measures to neutralize the special elements used in the operating system command are not taken. Exploiting this vulnerability can allow a malicious actor, operating locally, to gain privileges necessary to execute...
The vulnerability of the Cisco UCS Central device’s centralized management system allows a hacker to execute arbitrary code.
The vulnerability of the web-component of the Cisco UCS Central device management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially crafted HTTP request from a remote location...
CVE-2015-4183
Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...
Command injection
Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...
CVE-2015-4183
Cisco UCS Central Software 1.21a allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795...
CVE-2015-4183
Cisco UCS Central Software 1.2(1a) contains a CLI command-injection vulnerability (CVE-2015-4183) due to insufficient input validation. An authenticated, local attacker could inject arbitrary commands and execute with elevated OS privileges by supplying crafted CLI parameters. Impact includes pot...
Cisco UCS Central Software Command Line Interface Command Injection Vulnerability
Cisco UCS Central Software is a U.S. Cisco Cisco company's computing, virtualization and networking in one software platform. A security vulnerability exists in the command line interface of Cisco UCS Central Software. An authenticated, local attacker can exploit this vulnerability to inject...
Cisco UCS Central Software Command-Line Interface Command Injection Vulnerability
A vulnerability in the command-line interface CLI of Cisco UCS Central Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with elevated privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An...
Cisco UCS Central code execution
Code execution via web interface...
Cisco UCS Central Software Vulnerability
Cisco has released a security advisory to address a vulnerability in the web framework of Cisco Unified Computing System UCS Central Software. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to revie...
Cisco UCS Central Software Security Vulnerabilities Patched
Cisco has patched a serious remote code execution vulnerability in its Unified Computing System UCS Central software, a data center platform that integrates processing, networking, storage and virtualization into one system. “An attacker could exploit this vulnerability by sending a crafted HTTP...