Cisco Unified Computing System (Standalone) vulnerabilities
8 known vulnerabilities in Cisco Unified Computing System (Standalone) from Cisco. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
Cisco Enterprise NFV Infrastructure Software: Exposed Dangerous Method or Function
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an una
- 8.8 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Parameter/Argument Delimiters
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. Th
- 8.8 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Special Elements used in a Command
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerab
- 9.8 Critical severity
A vulnerability in the change password functionality of Cisco Integrated Management Controller…
A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system as Admin. This vulnerability is due to incorrect ha
- 7.1 High severity
Cisco Unified Computing System (Managed): URL Redirection to Untrusted Site
A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficien
- 8.8 High severity
Cisco Unified Computing System (Managed): Improper Restriction of Communication Channel to Intended Endpoints
A vulnerability in the SSH connection handling of Cisco Integrated Management Controller (IMC) for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker to access internal services with elevated
- 8.7 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their
- 8.8 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, t