CVE-2015-0633

Cisco Unified Computing System <= 1.4(7h) - Unauthenticated Access Control Bypass via DHCP Response

Title source: llm
STIX 2.1

Description

The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031796
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/72760
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/85711

Scores

EPSS 0.0104
EPSS Percentile 59.9%

Details

CWE
CWE-20
Status published
Products (23)
cisco/unified_computing_system 1.4
cisco/unified_computing_system 1.4\(1c\)
cisco/unified_computing_system 1.4\(2\)
cisco/unified_computing_system 1.4\(3c\)1
cisco/unified_computing_system 1.4\(3c\)2
cisco/unified_computing_system 1.4\(3j\)
cisco/unified_computing_system 1.4\(3k\)
cisco/unified_computing_system 1.4\(3p\)
cisco/unified_computing_system 1.4\(3p\)5
cisco/unified_computing_system 1.4\(3s\)
... and 13 more
Published Feb 26, 2015
Tracked Since Feb 18, 2026