Auth bypass in Cisco Unified_computing_system_6120xp_fabric_interconnect
CVE-2013-1186
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts5374…
Vulnerability class: Broken Authentication
EPSS: 0.002 (39.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Unified_computing_system_6120xp_fabric_interconnect
- Cisco Unified_computing_system_6140xp_fabric_interconnect
- Cisco Unified_computing_system_6248up_fabric_interconnect
- Cisco Unified_computing_system_6296up_fabric_interconnect
- Cisco Unified_computing_system_infrastructure_and_unified_computing_system_software — versions 1.0, 1.0\(2k\), 1.1
- Cisco Unified_computing_system_integrated_management_controller
- N/a — versions n/a
Weakness classification (CWE)
References
- 20130424 Multiple Vulnerabilities in Cisco Unified Computing System (x_refsource_CISCO, vendor-advisory, Vendor Advisory)