Auth bypass in Cisco Unified Computing System 6120xp Fabric Interconnect
CVE-2013-1186
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746.
Vulnerability class: Broken Authentication
EPSS: 0.021 (80.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_computing_system_6120xp_fabric_interconnect
- Cisco Unified_computing_system_6140xp_fabric_interconnect
- Cisco Unified_computing_system_6248up_fabric_interconnect
- Cisco Unified_computing_system_6296up_fabric_interconnect
- Cisco Unified_computing_system_infrastructure_and_unified_computing_system_software — versions 1.3\(1o\), 1.3(1p), 1.4\(1j\)
- Cisco Unified_computing_system_integrated_management_controller
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)