Unscored severity · published Apr 25, 2013
CVE-2013-1186
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UC
Unified Computing System 6120xp Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6140xp Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6248up Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System 6296up Fabric Interconnect · Cisco
All versions, or not specified · source: NVD
UC
Unified Computing System Infrastructure And Unified Computing System Software · Cisco
1.0; 1.0(2k); 1.1; 1.1(1m); 1.2; 1.2(1); +25 more · source: NVD
UC
Unified Computing System Integrated Management Controller · Cisco
All versions, or not specified · source: NVD
Affected product
UC
Unified Computing System 6120xp Fabric Interconnect
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1186
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1186
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti
More from Unified Computing System 6120xp Fabric Interconnect
–
CVE-2014-3261
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on…
–
CVE-2013-3467
Memory leak in the CLI component on Cisco Unified Computing System (UCS) 6100 Fabric Interconnect devices, in certain situations that lack a SPAN session, allows local users to…
–
CVE-2013-1185
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a…
–
CVE-2013-1184
The management API in the XML API management service in the Manager component in Cisco Unified Computing System (UCS) 1.x before 1.2(1b) allows remote attackers to cause a denial…
–
CVE-2013-1183
Buffer overflow in the Intelligent Platform Management Interface (IPMI) functionality in the Manager component in Cisco Unified Computing System (UCS) 1.0 and 1.1 before 1.1(1j)…