cve-2015-6435
Vulnerability from cvelistv5
Published
2016-01-22 11:00
Modified
2024-08-06 07:22
Severity ?
Summary
An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T07:22:21.494Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1034743",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1034743"
          },
          {
            "name": "20160120 Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-01-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-18T17:06:07",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "1034743",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1034743"
        },
        {
          "name": "20160120 Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2015-6435",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1034743",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1034743"
            },
            {
              "name": "20160120 Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability",
              "refsource": "CISCO",
              "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm"
            },
            {
              "name": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2015-6435",
    "datePublished": "2016-01-22T11:00:00",
    "dateReserved": "2015-08-17T00:00:00",
    "dateUpdated": "2024-08-06T07:22:21.494Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2015-6435\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2016-01-22T11:59:01.473\",\"lastModified\":\"2024-11-21T02:34:59.503\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.\"},{\"lang\":\"es\",\"value\":\"Una secuencia de comandos CGI no especificada en Cisco FX-OS en versiones anteriores a 1.1.2 en dispositivos Firepower 9000 y Cisco Unified Computing System (UCS) Manager en versiones anteriores a 2.2(4b), 2.2(5) en versiones anteriores a 2.2(5a) y 3.0 en versiones anteriores a 3.0(2e) permite a atacantes remotos ejecutar comandos shell arbitrarios a trav\u00e9s de una petici\u00f3n HTTP manipulada, tambi\u00e9n conocido como Bug ID CSCur90888.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-78\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1\\\\(1.86\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DCF5F07-33A1-48B3-B20A-FA6C13FDD469\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1\\\\(1.160\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B9E0CD4-B484-4323-AC1D-A0817F0F8C49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E313D2E5-70D2-4553-8A2C-9D129C20C857\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.0\\\\(2k\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99A5E1B0-4DC3-41E7-8560-56A94F06283B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.0_base:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87D49A41-C6A8-46EB-8128-EAF42B91C113\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.1\\\\(1m\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B88073EC-8B4F-4B87-9BF3-AEF78676C51E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.1_base:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6046C767-4302-4084-B615-058082219507\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.2\\\\(1d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D0E282D-5EF5-45E0-AE20-DB52AC2F62DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.2_base:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53DF6410-FE02-416A-9628-C43348F6C4A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.3\\\\(1c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"068F6305-38EB-4712-9EE3-BA77DEA87359\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.3\\\\(1m\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6324445-E24C-41E5-A2ED-CD2433CF00B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.3\\\\(1n\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D018115-49B2-4481-BC89-BCD122A87856\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.3\\\\(1o\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEE866E2-20AA-493B-A18B-2996F5AD1EDE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.3\\\\(1p\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"485E1E2D-C985-4B8A-90CC-A792CCB54A19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.3\\\\(1q\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC05BF73-91F4-4609-A995-743887D0288A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.3\\\\(1t\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"779EEBFE-4C19-4A98-9003-E8639C6000E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.3\\\\(1w\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5609CA23-04A1-4308-B0BA-AC7CAF10168A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.3\\\\(1y\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CADCBFF3-4EF3-4044-A6BD-87F1EFA3F400\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.3_base:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B35C1FFF-C436-4AE8-B600-54E1715479C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(1i\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4572E676-A059-47B1-B551-575BDDE88DF6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(1j\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2DA99C7-B65E-41E8-96BF-97AC4754FA11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(1m\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF0376E5-6ED5-4FBE-BBC9-49EE34F33FFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(3i\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2B3DCC9-D55E-43AB-B3A4-74E875D90CF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(3l\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFFD5DDE-F102-4BCE-B6FF-F933D9A6DBE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(3m\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFC57665-4DB5-466C-9BC2-E3071C44EDF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(3q\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CA75F8F-2028-4A1D-86BC-4E28A7BEF482\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(3s\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A5476F9-F175-4DF2-8008-816DCA4C37C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(3u\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6C892C7-97A2-4E33-AE5C-7221EEA30924\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(3y\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5419EF64-2884-4A02-8F1D-3E14AC5BD656\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(4f\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF2382B3-898B-4667-9861-93237260F6AF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(4g\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"610386C6-920B-48F8-BD9D-F03FE6B841A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(4i\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2A4CF61-CE7A-4056-8767-15A513CD7625\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(4j\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B392281-1F3F-40F8-8DFE-79BCCBABE51A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4\\\\(4k\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9033AFEC-350E-43FA-852B-13E4B093C7A1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:1.4_base:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59AD6159-8E1B-49B7-A674-ABCBE735AEC3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(1m\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92A3688C-07A7-4512-961B-760F6409A870\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(1q\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"022E46EF-EF65-4D1F-B4B1-47A4132D251A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(1s\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6033C22A-F8B4-4B23-907F-FDA63096DA50\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(1t\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"63FBD6C9-9460-4859-8894-BA9C26852152\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(1w\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEF91510-F611-4EFF-AFED-A028493263CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(1x\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"58EFD9D0-BF36-45CC-962D-88135BD7C919\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(2m\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66EBA481-49EE-4D57-A3C3-DB654B2951D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(2q\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9F95BDE-C353-418B-8BCF-F7BA8EE740D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(2r\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44E4BCAD-D952-4BF8-A988-F2DA2510DC8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(3a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"58E7E5FD-EDFA-457A-85B3-BDE687AB47BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(3b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F8BFE5B7-023F-4368-94E4-87B377C06855\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(3c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6658A81-E9D8-42CE-B89F-4B8B19B90EAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(4a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"580A7A52-7A57-428A-8A4E-6C2DF4143170\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(4b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46C89082-9755-47B5-B0C2-E77447EF1B59\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(4d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECD8BC5E-ED77-4526-87C7-C259C42A9889\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(5a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F78693A-AA54-44FD-AB16-E28C71B1E4EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(5b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"050A0BD8-AAEA-40D3-9834-88AC7B34F3E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0\\\\(5c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95C9B496-F0D0-45C3-8D38-102DB174F0AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.0_base:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09C58C35-F8CD-4432-B33C-2AAFEFF3C0EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.1\\\\(1a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3697BA4C-EA25-4C91-8319-51AE7E3354BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.1\\\\(1b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8688217A-883D-46BE-8D9B-DBD22334252F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.1\\\\(1d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95214EC8-C90F-484D-AA1E-559CFAD20307\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.1\\\\(1e\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3160E911-2FA8-48D7-A467-FB1125092745\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.1\\\\(1f\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57C64E54-BB97-4336-B988-C9C099C23FB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.1\\\\(2a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3E1E439-295B-4F12-BDC4-0E12E60C5911\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.1_base:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"068EF1CF-6BC8-45FA-A2CF-26E639EC8967\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(1b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"859B1CD5-2005-4D86-B794-18E311AEDDA6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(1c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"30F9E8E6-9F7D-4D3A-A952-B962219DC6C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(1d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9D2CFFD-3050-4004-92F5-95E93DBB5560\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(1e\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CB02F09-0323-47B4-87A7-4BFC64915093\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(1f\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"853237D8-847B-48D9-8EB1-763530B98833\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(1g\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62EB3042-14CE-43ED-A28E-FCE8A3CE0AD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(1h\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A57A4706-1AC1-4D21-A187-B59AD3FA4F30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(2c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17BC5C43-2B2F-479A-8BEF-69EC8465203B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(2c\\\\)a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"234C0F15-9E53-4C27-A0C3-DB124AC0959E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(3a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"430C45DB-B59A-40BD-A877-015155C2CEF1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(3b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9068CA60-F05F-4C32-9828-5E13C981C39C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(3c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29835968-61B4-4508-B904-C277243E588A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(3d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62AA4DDA-B12B-469B-BD8F-F3B6AE972476\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(3e\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD80F588-9699-42CC-8AB6-0D8A16353EBB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(3f\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BCCEB4B3-D5CC-485F-972F-75B22759A878\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(3g\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"657080ED-79A8-41B1-88C6-C66400D413B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(4b\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D3A6638-C070-41B9-B098-9217122F4689\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(4c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3005E846-EAE3-4B91-8AC2-96CF2D53CDC0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2\\\\(5a\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E32A101-DCE5-4057-B89A-DA2910FE3E06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:2.2_base:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"280856B2-45F4-413B-AA46-1B1741626584\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:3.0\\\\(1c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F96C8D0C-B97C-4F92-A15E-52E312CB7837\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:3.0\\\\(1d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AA860437-AAF6-4C50-8D44-5AA5E803A626\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:3.0\\\\(1e\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"171D3C3B-CE1E-4B52-B6EE-C65655034F9B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:3.0\\\\(2c\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5DD19B5-2EEE-4ADC-8213-B9FD1BD9C135\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:unified_computing_system:3.0\\\\(2d\\\\):*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FE1D17E-E57A-4469-A2F0-FDA4FDCBC523\"}]}]}],\"references\":[{\"url\":\"http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securitytracker.com/id/1034743\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securitytracker.com/id/1034743\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.