CVEvulnerability
CVE-2015-0633
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:A/AC:L/Au:N/C:N/I:P/A:C
- Weaknesses
- CWE-20
Description
The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.
Affected configurations
• cisco unified computing system 1.4
• cisco unified computing system 1.4\(1c\)
• cisco unified computing system 1.4\(2\)
• cisco unified computing system 1.4\(3c\)1
• cisco unified computing system 1.4\(3c\)2
• cisco unified computing system 1.4\(3j\)
• cisco unified computing system 1.4\(3k\)
• cisco unified computing system 1.4\(3p\)
• cisco unified computing system 1.4\(3p\)5
• cisco unified computing system 1.4\(3s\)
• cisco unified computing system 1.4\(4a\)
• cisco unified computing system 1.4\(4a\)1
• cisco unified computing system 1.4\(5b\)1
• cisco unified computing system 1.4\(5e\)
• cisco unified computing system 1.4\(5g\)
• cisco unified computing system 1.4\(5g\)2
• cisco unified computing system 1.4\(5h\)
• cisco unified computing system 1.4\(5j\)
• cisco unified computing system 1.4\(6c\)
• cisco unified computing system 1.4\(6d\)
• cisco unified computing system 1.4\(7b\)1
• cisco unified computing system 1.4\(7c\)1
• cisco unified computing system 1.4\(7h\)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37575 Vendor Advisory
- http://www.securityfocus.com/bid/72760 www.securityfocus.com
- http://www.securityfocus.com/bid/85711 www.securityfocus.com
- http://www.securitytracker.com/id/1031796 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37575 Vendor Advisory
- http://www.securityfocus.com/bid/72760 www.securityfocus.com
- http://www.securityfocus.com/bid/85711 www.securityfocus.com
- http://www.securitytracker.com/id/1031796 www.securitytracker.com