NetSight
high7.5

CVE-2013-1186

Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication…

Impact

Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746.

Affected products

VendorProductAffected versions
CiscoUnified Computing System Infrastructure And Unified Computing System Software
Versions 1.0, 1.0\(2k\), 1.1, 1.1\(1m\), 1.2, 1.2\(1\)
CiscoUnified Computing System 6120xp Fabric Interconnect
All versions
CiscoUnified Computing System 6140xp Fabric Interconnect
All versions
CiscoUnified Computing System 6248up Fabric Interconnect
All versions
CiscoUnified Computing System 6296up Fabric Interconnect
All versions
CiscoUnified Computing System Integrated Management Controller
All versions

Weakness classification

References