CVE-2011-2569

Cisco NX-OS (Nexus OS) 4.2 and 5.0 and Cisco UCS software 1.4 and 2.0 are affected by CVE-2011-2569 due to improper sanitization of user input in CLI options, enabling authenticated, local users to escalate privileges via unspecified vectors. Root cause: insufficient restriction of command-line o...

CVE-2013-1181

Cisco NX-OS-based products (Nexus 5500, Nexus 3000, UCS 6200) are affected by CVE-2013-1181. The issue allows remote attackers to trigger a denial-of-service (device reload) by sending a jumbo packet to the management interface. Affected ranges noted as Nexus 5500 4.x/5.x before 5.0(3)N2(2), Nexu...

CVE-2013-1178

Cisco NX-OS CDP-related vulnerability (CVE-2013-1178) affects Nexus 7000/5000/5500/4000/3000, Nexus 1000V, MDS 9000, UCS 6100/6200, and CGR 1000. Multiple buffer-overflow flaws in the Cisco Discovery Protocol allow remote attackers to execute arbitrary code via malformed CDP packets. Impact is de...

CVE-2013-1186

CVE-2013-1186 concerns Cisco UCS: versions 1.x before 1.4(4) and 2.x before 2.0(2m) are affected by a KVM authentication bypass via a crafted IMC authentication request. The issue is part of a Cisco UCS multi-vulnerability set; other CVEs (1182–1185) accompany it. Affected component is the Cisco ...

CVE-2013-1182

The CVE-2013-1182 issue affects Cisco UCS: the login page of the UCS Manager Web Console allows remote LDAP authentication bypass via a malformed request in versions prior to 1.0(2h), 1.1 prior to 1.1(1j), and 1.3(x). Root cause is an LDAP authentication bypass in the Web Console login flow. Impa...

CVE-2013-1185

CVE-2013-1185 affects Cisco UCS Manager web interface (UCS Manager) in Cisco UCS 1.x–2.x, prior to 2.0(2m). The vulnerability enables remote attackers to read sensitive data by accessing the web interface and retrieving either a technical-support bundle file or an on-device configuration backup (...

CVE-2014-3261

CVE-2014-3261 details a buffer overflow in Cisco NX-OS Smart Call Home, exploitable via crafted SMTP replies to remote SMTP servers. Affected platforms include Cisco UCS NX-OS on Fabric Interconnects, Nexus 3000/4000/5000/7000, and CGOS CG4 (with specific version ranges provided in the Cisco and ...

CVE-2013-1184

CVE-2013-1184 affects Cisco UCS Manager (XML API management service) in UCS 1.x before 1.2(1b). The Management API can be triggered by a malformed request to cause a denial-of-service (service outage). Affected component: XML API management service in the Manager. Root cause: malformed request ha...

CVE-2012-1339

The Cisco UCS Fabric Interconnect component (UCS 2.0) is affected by CVE-2012-1339 (Bug ID CSCtt94543). An unauthenticated, remote attacker can cause a denial of service by sending a crafted SSH session; the issue stems from improper handling of user-supplied SSH requests, potentially terminating...

CVE-2012-1364

Cisco UCS Fabric Interconnect SNMP processing vulnerability (CVE-2012-1364) affects Cisco UCS 1.4 and 2.0. An authenticated, remote attacker can trigger a DoS (device reload) by sending malformed SNMP requests to the FI device. Root cause relates to errors in SNMP message processing. Cisco adviso...

CVE-2013-1183

CVE-2013-1183 : Cisco UCS Manager IPMI functionality is affected by a buffer overflow in the IPMI component. Impacted are Cisco UCS 1.0 and 1.1 prior to 1.1(1j) and 1.2 prior to 1.2(1b). An external attacker could trigger arbitrary code execution by sending malformed data in a UDP packet. Root ca...

CVE-2012-1365

CVE-2012-1365 affects Cisco UCS (UCS) 1.4 and 2.0, where remote authenticated users can trigger a denial-of-service (device reload) by sending a malformed SNMP request to a Fabric Interconnect (FI). Root cause relates to SNMP message processing; the issue is tied to Bug ID CSCts32463. Cisco’s adv...