Description
UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0(2d) allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1036831
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/92956
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-ucs
Scores
CVSS v3
7.8
EPSS
0.0036
EPSS Percentile
28.5%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-264
Status
published
Products (28)
cisco/unified_computing_system
2.2\(1b\)
cisco/unified_computing_system
2.2\(1c\)
cisco/unified_computing_system
2.2\(1d\)
cisco/unified_computing_system
2.2\(1e\)
cisco/unified_computing_system
2.2\(1f\)
cisco/unified_computing_system
2.2\(1g\)
cisco/unified_computing_system
2.2\(1h\)
cisco/unified_computing_system
2.2\(2c\)
cisco/unified_computing_system
2.2\(2c\)a
cisco/unified_computing_system
2.2\(2d\)
... and 18 more
Published
Sep 18, 2016
Tracked Since
Feb 18, 2026