CVE-2013-1185: Exposure of Sensitive Information to an Unauthorized Actor

The web interface in the Manager component in Cisco Unified Computing System UCS 1.x and 2.x before 2.02m allows remote attackers to obtain sensitive information by reading a 1 technical-support bundle file or 2 on-device configuration backup, aka Bug ID CSCtq86543...

PT-2013-2951

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.0 through 1.1 before 1.11j Cisco Unified Computing System UCS version 1.2 before 1.21b Description The issue is related to a buffer overflow in the Intelligent Platform Management Interface IPMI...

CVE-2013-1184: Improper Input Validation

The management API in the XML API management service in the Manager component in Cisco Unified Computing System UCS 1.x before 1.21b allows remote attackers to cause a denial of service service outage via a malformed request, aka Bug ID CSCtg48206...

PT-2013-2949

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on Nexus 5500 devices versions 4.x through 5.x before 5.03N22 Cisco NX-OS on Nexus 3000 devices versions 5.x before 5.03U32 Cisco Unified Computing System UCS 6200 devices versions before 2.01w Description The issue allows remote...

Cisco Unified Computing System Fabric Interconnect SNMP Message Processing Denial of Service Vulnerability

Cisco Unified Computing System contains a vulnerability that could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to errors in processing malicious Simple Network Management Protocol SNMP messages by the affected software. An...

CVE-2012-1339

The Fabric Interconnect component in Cisco Unified Computing System UCS 2.0 allows remote attackers to cause a denial of service process crash via an attempted SSH session, aka Bug ID CSCtt94543...

CVE-2012-1365

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32463...

Cross site request forgery (csrf)

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32463...

PT-2012-3196

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS version 2.0 Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, via an attempted SSH session. Recommendations For Cisco Unified Computing System UCS versi...

PT-2012-3206

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.4 through 2.0 Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload, by sending a malformed SNMP request to a Fabric Interconnect device...

CVE-2012-1339: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Fabric Interconnect component in Cisco Unified Computing System UCS 2.0 allows remote attackers to cause a denial of service process crash via an attempted SSH session, aka Bug ID CSCtt94543...

CVE-2012-1365: Undefined Security Weakness

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32463...

CVE-2012-1364: Undefined Security Weakness

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32452...

PT-2012-3205

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.4 through 2.0 Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload, by sending a malformed SNMP request to a Fabric Interconnect device...

Command injection

Cisco Nexus OS aka NX-OS 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188...

CVE-2011-2569

Cisco Nexus OS aka NX-OS 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188...

CVE-2011-2569

Cisco NX-OS (Nexus OS) 4.2 and 5.0 and Cisco UCS software 1.4 and 2.0 are affected by CVE-2011-2569 due to improper sanitization of user input in CLI options, enabling authenticated, local users to escalate privileges via unspecified vectors. Root cause: insufficient restriction of command-line o...

CVE-2011-2569

Cisco Nexus OS aka NX-OS 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188...

PT-2011-3934

Name of the Vulnerable Software and Affected Versions Cisco Nexus OS versions 4.2 and 5.0 Cisco Unified Computing System versions 1.4 and 2.0 Description The issue is related to the improper restriction of command-line options, which allows local users to gain privileges. Recommendations For Cisc...

CVE-2011-2569: Undefined Security Weakness

Cisco Nexus OS aka NX-OS 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188...