Unscored severity · published Apr 25, 2013
CVE-2013-1183
Buffer overflow in the Intelligent Platform Management Interface (IPMI) functionality in the Manager component in Cisco Unified Computing System (UCS) 1.0 and 1.1 before 1.1(1j)…
–
CVSS
3.6%
EPSS
No
On KEV
Description
Buffer overflow in the Intelligent Platform Management Interface (IPMI) functionality in the Manager component in Cisco Unified Computing System (UCS) 1.0 and 1.1 before 1.1(1j) and 1.2 before 1.2(1b) allows remote attackers to execute arbitrary code via malformed data in a UDP packet, aka Bug ID CSCtd32371.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UC
Unified Computing System 6120xp Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6140xp Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6248up Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6296up Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System Infrastructure And Unified Computing System Software · Cisco
1.0; 1.0(2k); 1.1; 1.1(1m); 1.2; 1.2(1); +1 more · source: NVD
Affected product
UC
Unified Computing System 6120xp Fabric Interconnect
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1183
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1183
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti
More from Unified Computing System 6120xp Fabric Interconnect
–
CVE-2014-3261
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on…
–
CVE-2013-3467
Memory leak in the CLI component on Cisco Unified Computing System (UCS) 6100 Fabric Interconnect devices, in certain situations that lack a SPAN session, allows local users to…
–
CVE-2013-1186
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco…
–
CVE-2013-1185
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a…
–
CVE-2013-1184
The management API in the XML API management service in the Manager component in Cisco Unified Computing System (UCS) 1.x before 1.2(1b) allows remote attackers to cause a denial…