PT-2013-2958 · Cisco+1 · Cisco Unified Computing System (Ucs) C-Series Rack Server+1

Publicado 2013-08-01 · Atualizado 2013-10-07 · CVE-2013-1190

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System (UCS) C-Series Rack Server component version 1.4

Description The issue allows remote attackers to cause a denial of service, potentially leading to an Integrated Management Controller reboot or hang, by sending crafted packets to unrestricted inbound access ports. This can be demonstrated using tools like nmap.

Recommendations For Cisco Unified Computing System (UCS) C-Series Rack Server component version 1.4, restrict inbound access to ports to prevent remote attackers from causing a denial of service.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-1190

Produtos afetados

Cisco Unified Computing System (Ucs) C-Series Rack Server

Nmap

Referências · 2

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1190 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1190 · Nota de Segurança