CVEvulnerability

CVE-2015-0633

6.8 MEDIUM Published 2015-02-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-02-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:A/AC:L/Au:N/C:N/I:P/A:C
Weaknesses
CWE-20

Description

The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.

Affected configurations

• cisco unified computing system 1.4 • cisco unified computing system 1.4\(1c\) • cisco unified computing system 1.4\(2\) • cisco unified computing system 1.4\(3c\)1 • cisco unified computing system 1.4\(3c\)2 • cisco unified computing system 1.4\(3j\) • cisco unified computing system 1.4\(3k\) • cisco unified computing system 1.4\(3p\) • cisco unified computing system 1.4\(3p\)5 • cisco unified computing system 1.4\(3s\) • cisco unified computing system 1.4\(4a\) • cisco unified computing system 1.4\(4a\)1 • cisco unified computing system 1.4\(5b\)1 • cisco unified computing system 1.4\(5e\) • cisco unified computing system 1.4\(5g\) • cisco unified computing system 1.4\(5g\)2 • cisco unified computing system 1.4\(5h\) • cisco unified computing system 1.4\(5j\) • cisco unified computing system 1.4\(6c\) • cisco unified computing system 1.4\(6d\) • cisco unified computing system 1.4\(7b\)1 • cisco unified computing system 1.4\(7c\)1 • cisco unified computing system 1.4\(7h\)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References