CVE-2018-0113 | BDVDB-2026-96241 Detail

Cisco UCS Central

Description#

A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting a crafted request to the user interface of Cisco UCS Central. This vulnerability affects Cisco UCS Central Software prior to Release 2.0(1c). Cisco Bug IDs: CSCve70825.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-20 Improper Input Validation

References#

http://www.securityfocus.com/bid/102966
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-ucsc
http://www.securitytracker.com/id/1040337

Exploit#

No public exploit known

History#

Version 12018-02-08Record published in the CVE List.
Version 22024-12-02Most recent update recorded in the CVE List.