Unscored severity · published Apr 25, 2013
CVE-2013-1182
The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass…
–
CVSS
3.5%
EPSS
No
On KEV
Description
The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UC
Unified Computing System 6120xp Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6140xp Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6248up Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6296up Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System Infrastructure And Unified Computing System Software · Cisco
through 1.0; 1.1; 1.3(1c); 1.3(1m); 1.3(1n); 1.3(1o); +5 more · source: NVD
UC
Unified Computing System Integrated Management Controller · Cisco
All versions, or not specified · source: NVD
Affected product
UC
Unified Computing System 6120xp Fabric Interconnect
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1182
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1182
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti
More from Unified Computing System 6120xp Fabric Interconnect
–
CVE-2014-3261
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on…
–
CVE-2013-3467
Memory leak in the CLI component on Cisco Unified Computing System (UCS) 6100 Fabric Interconnect devices, in certain situations that lack a SPAN session, allows local users to…
–
CVE-2013-1186
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco…
–
CVE-2013-1185
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a…
–
CVE-2013-1184
The management API in the XML API management service in the Manager component in Cisco Unified Computing System (UCS) 1.x before 1.2(1b) allows remote attackers to cause a denial…