PT-2013-2952 · Cisco · Cisco Unified Computing System

Publicado 2013-04-25 · Atualizado 2013-04-25 · CVE-2013-1184

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System (UCS) versions 1.x before 1.2(1b)

Description The issue affects the management API in the XML API management service of the Manager component, allowing remote attackers to cause a denial of service via a malformed request.

Recommendations For versions 1.x before 1.2(1b), update to version 1.2(1b) or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-1184

Produtos afetados

Cisco Unified Computing System

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-1184 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti · Aviso do Fabricante