Unscored severity · published Apr 25, 2013
CVE-2013-1185
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UC
Unified Computing System 6120xp Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6140xp Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6248up Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6296up Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System Infrastructure And Unified Computing System Software · Cisco
1.0; 1.0(2k); 1.1; 1.1(1m); 1.2; 1.2(1); +29 more · source: NVD
UC
Unified Computing System Integrated Management Controller · Cisco
All versions, or not specified · source: NVD
Affected product
UC
Unified Computing System 6120xp Fabric Interconnect
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1185
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1185
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti
More from Unified Computing System 6120xp Fabric Interconnect
–
CVE-2014-3261
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on…
–
CVE-2013-3467
Memory leak in the CLI component on Cisco Unified Computing System (UCS) 6100 Fabric Interconnect devices, in certain situations that lack a SPAN session, allows local users to…
–
CVE-2013-1186
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco…
–
CVE-2013-1184
The management API in the XML API management service in the Manager component in Cisco Unified Computing System (UCS) 1.x before 1.2(1b) allows remote attackers to cause a denial…
–
CVE-2013-1183
Buffer overflow in the Intelligent Platform Management Interface (IPMI) functionality in the Manager component in Cisco Unified Computing System (UCS) 1.0 and 1.1 before 1.1(1j)…