Unified Computing System vulnerabilities
6 known vulnerabilities in Unified Computing System from Cisco. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
Cisco Enterprise NFV Infrastructure Software: Exposed Dangerous Method or Function
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an una
- 8.8 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Parameter/Argument Delimiters
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. Th
- 8.8 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Special Elements used in a Command
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerab
- 7.2 High severity
Cisco Unified Computing System (Managed): Improper Neutralization of Special Elements used in a Command
A vulnerability in the Redfish API of Cisco UCS B-Series, Cisco UCS Managed C-Series, and Cisco UCS X-Series Servers could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and ele
- 8.7 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their
- 8.8 High severity
Cisco Unified Computing System (Standalone): Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, t