PT-2017-2986 · Cisco · Cisco Ucs Central

Publicado 2017-09-20 · Atualizado 2019-10-09 · CVE-2017-12255

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco UCS Central Software (affected versions not specified)

Description The issue is related to insufficient input validation of commands entered in the CLI, which could allow an authenticated, local attacker to gain shell access by entering a specific command with crafted arguments. This could enable the attacker to exploit the vulnerability and gain shell access to the underlying system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2017-02331

CVE-2017-12255

Produtos afetados

Cisco Ucs Central

Referências · 6

• https://bdu.fstec.ru/vul/2017-02331 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-ucs · Aviso do Fabricante
• http://securityfocus.com/bid/100932 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-12255 · Nota de Segurança
• http://securitytracker.com/id/1039412 · Nota
• https://osv.dev/vulnerability/CVE-2017-12255 · Aviso do Fabricante