Improper input validation in Cisco Unified Computing System 6120xp Fabric Interconnect
CVE-2013-1184
The management API in the XML API management service in the Manager component in Cisco Unified Computing System (UCS) 1.x before 1.2(1b) allows remote attackers to cause a denial of service (service outage) via a malformed request, aka Bug ID CSCtg48206.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.013 (69.1th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_computing_system_6120xp_fabric_interconnect
- Cisco Unified_computing_system_6140xp_fabric_interconnect
- Cisco Unified_computing_system_6248up_fabric_interconnect
- Cisco Unified_computing_system_6296up_fabric_interconnect
- Cisco Unified_computing_system_infrastructure_and_unified_computing_system_software — versions 1.0, 1.0(2k), 1.2\(1\)
- Cisco Unified_computing_system_integrated_management_controller
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)