PT-2015-6490 · Cisco · Cisco Unified Computing System (Ucs) B Blade Server

Published 2015-10-12 · Updated 2016-12-08 · CVE-2015-4265

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System (UCS) B Blade Server Software versions 2.2.x through 2.2.5

Description The issue allows local users to cause a denial of service, resulting in a host OS or BMC hang, by sending crafted packets over the Inter-IC (I2C) bus.

Recommendations For Cisco Unified Computing System (UCS) B Blade Server Software versions 2.2.x through 2.2.5, update to version 2.2.6 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-4265

Affected Products

Cisco Unified Computing System (Ucs) B Blade Server

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151006-ucs · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-4265 · Security Note
• http://securitytracker.com/id/1033752 · Note