PT-2017-1789

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System versions prior to 2.11.38 Cisco Unified Computing System Central versions prior to 2.11.38 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 2.11.38 Cisco Firepower 9300...

PT-2017-1791

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 2.01.82 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 2.01.82 Cisco Firepower 9300 Security Appliance versions prior to 2.01.82 Description A...

PT-2017-1788

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System Central versions 3.12cB Cisco Integrated Management Controller IMC Software versions 3.12cB Description The issue is related to an open redirect vulnerability in the web interface of the affected systems. This...

PT-2017-1790

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 92.21.101 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.21.101 Description A...

PT-2017-1793

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System versions prior to 92.21.105 Cisco Unified Computing System Central versions prior to 2.11.69 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions 2.01.68 through 3.11kA Description The...

PT-2017-1794

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Manager versions prior to 2.01.115 Cisco Firepower 4100 Series Next-Generation Firewall NGFW versions prior to 92.21.101 Cisco Firepower 9300 Security Appliance versions prior to 92.11.1658 Description A...

Cisco UCS Manager CLI Command Injection Vulnerabilities (cisco-sa-20170405-cli1, cisco-sa-20170405-cli2)

A vulnerability in the CLI of the Cisco Unified Computing System UCS Manager could allow an authenticated, local attacker to perform a command injection attack. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

CVE-2017-6604: URL Redirection to Untrusted Site

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified Computing System UCS...

Cisco Unified Computing System Local Elevation of Privilege Vulnerability

Cisco Unified Computing System Manager provides unified, embedded management of all hardware and software components within a unified computing system. An elevation of privilege vulnerability exists in Cisco Unified Computing System UCS versions prior to 3.02d in UCS Manager and UCS 6200 Fabric...

PT-2016-6877

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions through 3.02d Description The issue allows local users to obtain OS root access via crafted CLI input. Recommendations For versions through 3.02d, update to a version later than 3.02d to resolve the...

Cisco Patches Critical WebEx Meetings Server Vulnerability

Cisco warned customers of 12 vulnerabilities across its product line this week, including a critical vulnerability in the software that powers its conferencing product, WebEx Meetings Server. The company stressed on Wednesday that version 2.6 of its WebEx Meetings Server is vulnerable to a remote...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in several products. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...

Cisco Unified Computing System Command Line Interface Privilege Escalation Vulnerability

A vulnerability in the command-line interface CLI of the Cisco Unified Computing System UCS Manager and UCS 6200 Series Fabric Interconnects could allow an authenticated, local attacker to access the underlying operating system with the privileges of the root user. The vulnerability is due to...

CVE-2016-1374: Improper Input Validation

The web framework in Cisco Unified Computing System UCS Performance Manager 2.0.0 and earlier allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request, aka Bug ID CSCuy07827...

PT-2016-4743

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS Performance Manager versions 2.0.0 and earlier Description The issue allows remote authenticated users to execute arbitrary commands via crafted parameters in a GET request. Recommendations For Cisco Unified...

Cisco Unified Computing System Performance Manager Input Validation Vulnerability

Cisco Unified Computing System Manager provides unified, embedded management of hardware and software components within a computing system. Cisco Unified Computing System UCS Performance Manager does not validate the parameter values of HTTP GET requests, which can be exploited to perform...

Cisco Unified Computing System Performance Manager Input Validation Vulnerability

A vulnerability in the web framework of Cisco Unified Computing System UCS Performance Manager could allow an authenticated, remote attacker to execute arbitrary commands. The vulnerability is due to insufficient input validation performed on parameters that are passed via an HTTP GET request. An...

Cisco Releases Security Update

Cisco has released a security update to address a vulnerability in its Unified Computing System UCS Performance Manager. Exploitation of this vulnerability could allow an authenticated remote attacker to take control of an affected system. Users and administrators are encouraged to review the Cis...

Cisco Unified Computing System Platform Emulator Command Injection/Buffer Overflow Vulnerability (cisco-sa-20160414-ucspe1, cisco-sa-20160414-ucspe2)

Cisco Unified Computing System Platform Emulator is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of Cisco Nexus 7000 software allows a malicious actor to trigger buffer overflows.

The buffer overflow in the implementation of the Smart Call Home function in Cisco NX-OS for Cisco Unified Computing System UCS switches and Nexus devices, as well as in Cisco CG-OS for Cisco Connected Grid series 1000 routers, allows remote SMTP servers to execute arbitrary code using specially...