CVEvulnerability

CVE-2013-1186

7.5 HIGH Published 2013-04-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-04-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746.

Affected configurations

• cisco unified computing system infrastructure and unified computing system software 1.0 • cisco unified computing system infrastructure and unified computing system software 1.0\(2k\) • cisco unified computing system infrastructure and unified computing system software 1.1 • cisco unified computing system infrastructure and unified computing system software 1.1\(1m\) • cisco unified computing system infrastructure and unified computing system software 1.2 • cisco unified computing system infrastructure and unified computing system software 1.2\(1\) • cisco unified computing system infrastructure and unified computing system software 1.2\(1a\) • cisco unified computing system infrastructure and unified computing system software 1.2\(1d\) • cisco unified computing system infrastructure and unified computing system software 1.3\(1c\) • cisco unified computing system infrastructure and unified computing system software 1.3\(1m\) • cisco unified computing system infrastructure and unified computing system software 1.3\(1n\) • cisco unified computing system infrastructure and unified computing system software 1.3\(1o\) • cisco unified computing system infrastructure and unified computing system software 1.3\(1p\) • cisco unified computing system infrastructure and unified computing system software 1.3\(1q\) • cisco unified computing system infrastructure and unified computing system software 1.3\(1t\) • cisco unified computing system infrastructure and unified computing system software 1.3\(1w\) • cisco unified computing system infrastructure and unified computing system software 1.3\(1y\) • cisco unified computing system infrastructure and unified computing system software 1.4\(1j\) • cisco unified computing system infrastructure and unified computing system software 1.4\(1m\) • cisco unified computing system infrastructure and unified computing system software 1.4\(3i\) • cisco unified computing system infrastructure and unified computing system software 1.4\(3l\) • cisco unified computing system infrastructure and unified computing system software 1.4\(3m\) • cisco unified computing system infrastructure and unified computing system software 1.4\(3q\) • cisco unified computing system infrastructure and unified computing system software 1.4\(3s\) • cisco unified computing system infrastructure and unified computing system software 1.4\(3u\) • cisco unified computing system infrastructure and unified computing system software 1.4\(3y\) • cisco unified computing system infrastructure and unified computing system software 2.0\(1q\) • cisco unified computing system infrastructure and unified computing system software 2.0\(1s\) • cisco unified computing system infrastructure and unified computing system software 2.0\(1t\) • cisco unified computing system infrastructure and unified computing system software 2.0\(1w\) • cisco unified computing system infrastructure and unified computing system software 2.0\(1x\) • cisco unified computing system 6120xp fabric interconnect • cisco unified computing system 6140xp fabric interconnect • cisco unified computing system 6248up fabric interconnect • cisco unified computing system 6296up fabric interconnect • cisco unified computing system integrated management controller

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References