CVE-2017-12255

MEDIUM

Cisco UCS Central Software - Authenticated Restricted Shell Break via CLI Command Injection

Title source: llm
STIX 2.1

Description

A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. The vulnerability is due to insufficient input validation of commands entered in the CLI, aka a Restricted Shell Break Vulnerability. An attacker could exploit this vulnerability by entering a specific command with crafted arguments. An exploit could allow the attacker to gain shell access to the underlying system. Cisco Bug IDs: CSCve70762.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/100932
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1039412

Scores

CVSS v3 6.7
EPSS 0.0043
EPSS Percentile 34.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (2)
cisco/unified_computing_system 1.5\(1c\)
n/a/Cisco UCS Central Software Cisco UCS Central Software
Published Sep 21, 2017
Tracked Since Feb 18, 2026