Vulnerabilites related to cisco - c3160
cve-2015-0633
Vulnerability from cvelistv5
Published
2015-02-26 01:00
Modified
2024-08-06 04:17
Severity ?
EPSS score ?
Summary
The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.securitytracker.com/id/1031796 | vdb-entry, x_refsource_SECTRACK | |
| http://tools.cisco.com/security/center/viewAlert.x?alertId=37575 | x_refsource_CONFIRM | |
| http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633 | vendor-advisory, x_refsource_CISCO | |
| http://www.securityfocus.com/bid/72760 | vdb-entry, x_refsource_BID | |
| http://www.securityfocus.com/bid/85711 | vdb-entry, x_refsource_BID |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-06T04:17:32.464Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "1031796", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1031796", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575", }, { name: "20150224 Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability", tags: [ "vendor-advisory", "x_refsource_CISCO", "x_transferred", ], url: "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633", }, { name: "72760", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/72760", }, { name: "85711", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/85711", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2015-02-24T00:00:00", descriptions: [ { lang: "en", value: "The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2019-04-12T20:06:02", orgId: "d1c1063e-7a18-46af-9102-31f8928bc633", shortName: "cisco", }, references: [ { name: "1031796", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1031796", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575", }, { name: "20150224 Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability", tags: [ "vendor-advisory", "x_refsource_CISCO", ], url: "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633", }, { name: "72760", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/72760", }, { name: "85711", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/85711", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "psirt@cisco.com", ID: "CVE-2015-0633", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "1031796", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1031796", }, { name: "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575", refsource: "CONFIRM", url: "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575", }, { name: "20150224 Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability", refsource: "CISCO", url: "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633", }, { name: "72760", refsource: "BID", url: "http://www.securityfocus.com/bid/72760", }, { name: "85711", refsource: "BID", url: "http://www.securityfocus.com/bid/85711", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "d1c1063e-7a18-46af-9102-31f8928bc633", assignerShortName: "cisco", cveId: "CVE-2015-0633", datePublished: "2015-02-26T01:00:00", dateReserved: "2015-01-07T00:00:00", dateUpdated: "2024-08-06T04:17:32.464Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Vulnerability from fkie_nvd
Published
2015-02-26 01:59
Modified
2024-11-21 02:23
Severity ?
Summary
The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4:*:*:*:*:*:*:*", matchCriteriaId: "FDE26A38-91CF-4370-812B-7392493EFDC8", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(1c\\):*:*:*:*:*:*:*", matchCriteriaId: "F36331E2-247F-4424-8180-8CAF148C902F", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(2\\):*:*:*:*:*:*:*", matchCriteriaId: "B7D3105E-90F5-45CF-9F61-2C097C29F69F", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3c\\)1:*:*:*:*:*:*:*", matchCriteriaId: "7405DFEA-AEBD-465E-9E8C-410F76ABD1B4", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3c\\)2:*:*:*:*:*:*:*", matchCriteriaId: "5DCFCAD0-6AD7-4922-8590-C5AC6FCAD07B", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3j\\):*:*:*:*:*:*:*", matchCriteriaId: "D2EBC379-6B6E-4163-99A1-59D9EFD25617", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3k\\):*:*:*:*:*:*:*", matchCriteriaId: "897BEF05-B82F-40ED-BD61-82565414B8A3", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3p\\):*:*:*:*:*:*:*", matchCriteriaId: "9705927D-AC90-4634-B1CF-4988CBFDED1F", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3p\\)5:*:*:*:*:*:*:*", matchCriteriaId: "48E4E069-4533-496E-AE9F-53877ECAF012", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3s\\):*:*:*:*:*:*:*", matchCriteriaId: "8A5476F9-F175-4DF2-8008-816DCA4C37C2", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4a\\):*:*:*:*:*:*:*", matchCriteriaId: "52C45532-1567-431C-B34E-62DC5D06A031", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4a\\)1:*:*:*:*:*:*:*", matchCriteriaId: "15E4FCD8-4873-45FB-A6DA-2126D3162A77", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5b\\)1:*:*:*:*:*:*:*", matchCriteriaId: "69CC7E68-740F-43BF-A3DC-F534CA86DE57", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5e\\):*:*:*:*:*:*:*", matchCriteriaId: "B6A8C33B-F5BA-4B06-A5FA-90A3C93906E3", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5g\\):*:*:*:*:*:*:*", matchCriteriaId: "52006265-724E-420C-85FD-B3B36A5EBAB9", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5g\\)2:*:*:*:*:*:*:*", matchCriteriaId: "9B134E5E-E98E-47A9-BE94-2BD18AB13EF4", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5h\\):*:*:*:*:*:*:*", matchCriteriaId: "7352EFF1-6392-44CB-B3E8-72D9DFFD7DE1", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5j\\):*:*:*:*:*:*:*", matchCriteriaId: "55C80AE3-D250-4B62-961B-6F50DA3C9C7D", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(6c\\):*:*:*:*:*:*:*", matchCriteriaId: "7ED8A041-855A-47CB-ABCC-86F53EFFCF5F", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(6d\\):*:*:*:*:*:*:*", matchCriteriaId: "AFA79800-A935-463F-82B4-C8A58B887A69", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7b\\)1:*:*:*:*:*:*:*", matchCriteriaId: "9167071D-DE00-4C0B-AF5A-4982B74DB998", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7c\\)1:*:*:*:*:*:*:*", matchCriteriaId: "9D118D6E-59F1-4E4A-BECA-92E98DCD3397", vulnerable: true, }, { criteria: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7h\\):*:*:*:*:*:*:*", matchCriteriaId: "7A81D53E-82E0-4008-9C45-A0FDED7C8F22", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:cisco:c200_m1:*:*:*:*:*:*:*:*", matchCriteriaId: "74DAA02E-56F2-4CC1-97CF-00E775FDE531", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c200_m2:*:*:*:*:*:*:*:*", matchCriteriaId: "27BB731F-A20D-485E-B9F4-612ED6B58D59", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c210_m2:*:*:*:*:*:*:*:*", matchCriteriaId: "3DFD3B18-5DCC-4E5E-A2BA-1F2F7C0D4DFC", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c22_m3:*:*:*:*:*:*:*:*", matchCriteriaId: "3D3270DB-AF43-4E4A-ABFF-C5AA66427AD4", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c220_m3:*:*:*:*:*:*:*:*", matchCriteriaId: "6FAB8C01-31F7-4071-92FF-0AD7B40BDDDF", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c220_m4:*:*:*:*:*:*:*:*", matchCriteriaId: "915CDCF7-101B-47F8-AAF5-2B4805504997", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c24_m3:*:*:*:*:*:*:*:*", matchCriteriaId: "618008DA-EB84-4F7C-BE79-3C76D53FFC0E", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c240_m3:*:*:*:*:*:*:*:*", matchCriteriaId: "18ABBEBC-AF71-43EC-BE00-F77E6AF80CC8", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c240_m4:*:*:*:*:*:*:*:*", matchCriteriaId: "CD4A3A8B-0022-4406-84D7-0A1B002E6148", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c250_m1:*:*:*:*:*:*:*:*", matchCriteriaId: "16EF4E36-4DD5-4C58-BE0F-DEFF81C6D438", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c250_m2:*:*:*:*:*:*:*:*", matchCriteriaId: "242E34EB-AE1A-447F-82BB-580C5513C64E", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c260_m2:*:*:*:*:*:*:*:*", matchCriteriaId: "1B7D4502-0A1B-4D13-A1CF-5479BA802FDF", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c3160:*:*:*:*:*:*:*:*", matchCriteriaId: "6385E303-B5AE-46B5-A2D3-23615B89B92C", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c420_m2:*:*:*:*:*:*:*:*", matchCriteriaId: "3EA3B25A-37CB-4DF1-B510-4E1238085D7E", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c420_m3:*:*:*:*:*:*:*:*", matchCriteriaId: "5D93C23B-AAD0-44B3-8144-80B2F4EF800C", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c460_m1:*:*:*:*:*:*:*:*", matchCriteriaId: "C48649E1-949E-47AB-9DA1-1AE99C689766", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c460_m2:*:*:*:*:*:*:*:*", matchCriteriaId: "9912EDFE-F113-4B71-9BE9-08E5AA7CEB12", vulnerable: false, }, { criteria: "cpe:2.3:h:cisco:c460_m4:*:*:*:*:*:*:*:*", matchCriteriaId: "F373F2AC-E045-447C-9ADA-60B84F016691", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.", }, { lang: "es", value: "Integrated Management Controller (IMC) en Cisco Unified Computing System (UCS) 1.4(7h) y anteriores en los servidores de la serie C permite a atacantes remotos evadir las restricciones de acceso mediante el envío de paquetes manipulados de respuestas DHCP en la red local, también conocido como Bug ID CSCuf52876.", }, ], id: "CVE-2015-0633", lastModified: "2024-11-21T02:23:26.437", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "ADJACENT_NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 6.8, confidentialityImpact: "NONE", integrityImpact: "PARTIAL", vectorString: "AV:A/AC:L/Au:N/C:N/I:P/A:C", version: "2.0", }, exploitabilityScore: 6.5, impactScore: 7.8, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2015-02-26T01:59:00.063", references: [ { source: "psirt@cisco.com", tags: [ "Vendor Advisory", ], url: "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633", }, { source: "psirt@cisco.com", tags: [ "Vendor Advisory", ], url: "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575", }, { source: "psirt@cisco.com", url: "http://www.securityfocus.com/bid/72760", }, { source: "psirt@cisco.com", url: "http://www.securityfocus.com/bid/85711", }, { source: "psirt@cisco.com", url: "http://www.securitytracker.com/id/1031796", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/72760", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/85711", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securitytracker.com/id/1031796", }, ], sourceIdentifier: "psirt@cisco.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-20", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
var-201502-0157
Vulnerability from variot
The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876. Cisco Unified Computing System C-Series are prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to cause a denial-of-service condition, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCuf52876. There is a security vulnerability in IMC in Cisco UCS 1.4(7h) and earlier versions of C-Series servers
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", affected_products: { "@id": "https://www.variotdbs.pl/ref/affected_products", }, configurations: { "@id": "https://www.variotdbs.pl/ref/configurations", }, credits: { "@id": "https://www.variotdbs.pl/ref/credits", }, cvss: { "@id": "https://www.variotdbs.pl/ref/cvss/", }, description: { "@id": "https://www.variotdbs.pl/ref/description/", }, exploit_availability: { "@id": "https://www.variotdbs.pl/ref/exploit_availability/", }, external_ids: { "@id": "https://www.variotdbs.pl/ref/external_ids/", }, iot: { "@id": "https://www.variotdbs.pl/ref/iot/", }, iot_taxonomy: { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/", }, patch: { "@id": "https://www.variotdbs.pl/ref/patch/", }, problemtype_data: { "@id": "https://www.variotdbs.pl/ref/problemtype_data/", }, references: { "@id": "https://www.variotdbs.pl/ref/references/", }, sources: { "@id": "https://www.variotdbs.pl/ref/sources/", }, sources_release_date: { "@id": "https://www.variotdbs.pl/ref/sources_release_date/", }, sources_update_date: { "@id": "https://www.variotdbs.pl/ref/sources_update_date/", }, threat_type: { "@id": "https://www.variotdbs.pl/ref/threat_type/", }, title: { "@id": "https://www.variotdbs.pl/ref/title/", }, type: { "@id": "https://www.variotdbs.pl/ref/type/", }, }, "@id": "https://www.variotdbs.pl/vuln/VAR-201502-0157", affected_products: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { model: "unified computing system", scope: "eq", trust: 1.6, vendor: "cisco", version: "1.4\\(7c\\)1", }, { model: "unified computing system", scope: "eq", trust: 1.6, vendor: "cisco", version: "1.4\\(5j\\)", }, { model: "unified computing system", scope: "eq", trust: 1.6, vendor: "cisco", version: "1.4\\(7h\\)", }, { model: "unified computing system", scope: "eq", trust: 1.6, vendor: "cisco", version: "1.4", }, { model: "unified computing system", scope: "eq", trust: 1.6, vendor: "cisco", version: "1.4\\(2\\)", }, { model: "unified computing system", scope: "eq", trust: 1.6, vendor: "cisco", version: "1.4\\(5g\\)2", }, { model: "unified computing system", scope: "eq", trust: 1.6, vendor: "cisco", version: "1.4\\(6d\\)", }, { model: "unified computing system", scope: "eq", trust: 1.6, vendor: "cisco", version: "1.4\\(1c\\)", }, { model: "unified computing system", scope: "eq", trust: 1.6, vendor: "cisco", version: "1.4\\(5h\\)", }, { model: "unified computing system", scope: "eq", trust: 1.6, vendor: "cisco", version: "1.4\\(7b\\)1", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(4a\\)", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(5b\\)1", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(3c\\)1", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(3j\\)", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(3p\\)", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(6c\\)", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(4a\\)1", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(3s\\)", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(3k\\)", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(3c\\)2", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(3p\\)5", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(5e\\)", }, { model: "unified computing system", scope: "eq", trust: 1, vendor: "cisco", version: "1.4\\(5g\\)", }, { model: "c200-m1", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c200-m2", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c210-m2", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c22-m3", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c220-m3", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c220-m4", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c24-m3", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c240-m3", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c240-m4", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c250-m1", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c250-m2", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c260-m2", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c3160", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c420-m2", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c420-m3", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c460-m1", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c460-m2", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "c460-m4", scope: null, trust: 0.8, vendor: "cisco", version: null, }, { model: "unified computing system software", scope: "lte", trust: 0.8, vendor: "cisco", version: "1.4(7h)", }, { model: "unified computing system 2.2 a", scope: null, trust: 0.3, vendor: "cisco", version: null, }, ], sources: [ { db: "BID", id: "85711", }, { db: "JVNDB", id: "JVNDB-2015-001628", }, { db: "NVD", id: "CVE-2015-0633", }, { db: "CNNVD", id: "CNNVD-201502-457", }, ], }, configurations: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", children: { "@container": "@list", }, cpe_match: { "@container": "@list", }, data: { "@container": "@list", }, nodes: { "@container": "@list", }, }, data: [ { CVE_data_version: "4.0", nodes: [ { children: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3j\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3k\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5e\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5g\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5g\\)2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7h\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(1c\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(2\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3s\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4a\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(6c\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(6d\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3p\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3p\\)5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5h\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5j\\):*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3c\\)2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3c\\)1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4a\\)1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5b\\)1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7b\\)1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7c\\)1:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:h:cisco:c240_m4:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c240_m3:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c210_m2:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c200_m2:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c460_m2:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c420_m2:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c24_m3:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c22_m3:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c3160:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c460_m4:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c220_m4:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c220_m3:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c200_m1:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c420_m3:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c260_m2:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c460_m1:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c250_m2:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, { cpe23Uri: "cpe:2.3:h:cisco:c250_m1:*:*:*:*:*:*:*:*", cpe_name: [], vulnerable: false, }, ], operator: "OR", }, ], cpe_match: [], operator: "AND", }, ], }, ], sources: [ { db: "NVD", id: "CVE-2015-0633", }, ], }, credits: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Cisco", sources: [ { db: "BID", id: "85711", }, { db: "BID", id: "72760", }, { db: "CNNVD", id: "CNNVD-201502-457", }, ], trust: 1.2, }, cve: "CVE-2015-0633", cvss: { "@context": { cvssV2: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2", }, cvssV3: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#", }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/", }, severity: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#", }, "@id": "https://www.variotdbs.pl/ref/cvss/severity", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, "@id": "https://www.variotdbs.pl/ref/sources", }, }, data: [ { cvssV2: [ { acInsufInfo: false, accessComplexity: "LOW", accessVector: "ADJACENT_NETWORK", authentication: "NONE", author: "NVD", availabilityImpact: "COMPLETE", baseScore: 6.8, confidentialityImpact: "NONE", exploitabilityScore: 6.5, impactScore: 7.8, integrityImpact: "PARTIAL", obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", trust: 1, userInteractionRequired: false, vectorString: "AV:A/AC:L/Au:N/C:N/I:P/A:C", version: "2.0", }, { acInsufInfo: null, accessComplexity: "Low", accessVector: "Adjacent Network", authentication: "None", author: "NVD", availabilityImpact: "Complete", baseScore: 6.8, confidentialityImpact: "None", exploitabilityScore: null, id: "CVE-2015-0633", impactScore: null, integrityImpact: "Partial", obtainAllPrivilege: null, obtainOtherPrivilege: null, obtainUserPrivilege: null, severity: "Medium", trust: 0.9, userInteractionRequired: null, vectorString: "AV:A/AC:L/Au:N/C:N/I:P/A:C", version: "2.0", }, { accessComplexity: "LOW", accessVector: "ADJACENT_NETWORK", authentication: "NONE", author: "VULHUB", availabilityImpact: "COMPLETE", baseScore: 6.8, confidentialityImpact: "NONE", exploitabilityScore: 6.5, id: "VHN-78579", impactScore: 7.8, integrityImpact: "PARTIAL", severity: "MEDIUM", trust: 0.1, vectorString: "AV:A/AC:L/AU:N/C:N/I:P/A:C", version: "2.0", }, ], cvssV3: [], severity: [ { author: "NVD", id: "CVE-2015-0633", trust: 1.8, value: "MEDIUM", }, { author: "CNNVD", id: "CNNVD-201502-457", trust: 0.6, value: "MEDIUM", }, { author: "VULHUB", id: "VHN-78579", trust: 0.1, value: "MEDIUM", }, { author: "VULMON", id: "CVE-2015-0633", trust: 0.1, value: "MEDIUM", }, ], }, ], sources: [ { db: "VULHUB", id: "VHN-78579", }, { db: "VULMON", id: "CVE-2015-0633", }, { db: "JVNDB", id: "JVNDB-2015-001628", }, { db: "NVD", id: "CVE-2015-0633", }, { db: "CNNVD", id: "CNNVD-201502-457", }, ], }, description: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876. Cisco Unified Computing System C-Series are prone to a remote denial-of-service vulnerability. \nAttackers can exploit this issue to cause a denial-of-service condition, denying service to legitimate users. \nThis issue is being tracked by Cisco Bug ID CSCuf52876. There is a security vulnerability in IMC in Cisco UCS 1.4(7h) and earlier versions of C-Series servers", sources: [ { db: "NVD", id: "CVE-2015-0633", }, { db: "JVNDB", id: "JVNDB-2015-001628", }, { db: "BID", id: "85711", }, { db: "BID", id: "72760", }, { db: "VULHUB", id: "VHN-78579", }, { db: "VULMON", id: "CVE-2015-0633", }, ], trust: 2.34, }, external_ids: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { db: "NVD", id: "CVE-2015-0633", trust: 3.2, }, { db: "BID", id: "72760", trust: 2.1, }, { db: "BID", id: "85711", trust: 2.1, }, { db: "SECTRACK", id: "1031796", trust: 1.8, }, { db: "JVNDB", id: "JVNDB-2015-001628", trust: 0.8, }, { db: "CNNVD", id: "CNNVD-201502-457", trust: 0.7, }, { db: "VULHUB", id: "VHN-78579", trust: 0.1, }, { db: "VULMON", id: "CVE-2015-0633", trust: 0.1, }, ], sources: [ { db: "VULHUB", id: "VHN-78579", }, { db: "VULMON", id: "CVE-2015-0633", }, { db: "BID", id: "85711", }, { db: "BID", id: "72760", }, { db: "JVNDB", id: "JVNDB-2015-001628", }, { db: "NVD", id: "CVE-2015-0633", }, { db: "CNNVD", id: "CNNVD-201502-457", }, ], }, id: "VAR-201502-0157", iot: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: true, sources: [ { db: "VULHUB", id: "VHN-78579", }, ], trust: 0.7714285599999999, }, last_update_date: "2023-12-18T12:51:47.497000Z", patch: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { title: "Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability", trust: 0.8, url: "http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2015-0633", }, { title: "37575", trust: 0.8, url: "http://tools.cisco.com/security/center/viewalert.x?alertid=37575", }, ], sources: [ { db: "JVNDB", id: "JVNDB-2015-001628", }, ], }, problemtype_data: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { problemtype: "CWE-20", trust: 1.9, }, ], sources: [ { db: "VULHUB", id: "VHN-78579", }, { db: "JVNDB", id: "JVNDB-2015-001628", }, { db: "NVD", id: "CVE-2015-0633", }, ], }, references: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", data: { "@container": "@list", }, sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: [ { trust: 2.5, url: "http://www.securityfocus.com/bid/85711", }, { trust: 1.8, url: "http://www.securityfocus.com/bid/72760", }, { trust: 1.8, url: "http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2015-0633", }, { trust: 1.8, url: "http://tools.cisco.com/security/center/viewalert.x?alertid=37575", }, { trust: 1.8, url: "http://www.securitytracker.com/id/1031796", }, { trust: 1.2, url: "http://www.cisco.com/", }, { trust: 0.9, url: "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20151210-ucs", }, { trust: 0.8, url: "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-0633", }, { trust: 0.8, url: "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-0633", }, { trust: 0.1, url: "https://cwe.mitre.org/data/definitions/20.html", }, { trust: 0.1, url: "https://nvd.nist.gov", }, ], sources: [ { db: "VULHUB", id: "VHN-78579", }, { db: "VULMON", id: "CVE-2015-0633", }, { db: "BID", id: "85711", }, { db: "BID", id: "72760", }, { db: "JVNDB", id: "JVNDB-2015-001628", }, { db: "NVD", id: "CVE-2015-0633", }, { db: "CNNVD", id: "CNNVD-201502-457", }, ], }, sources: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", data: { "@container": "@list", }, }, data: [ { db: "VULHUB", id: "VHN-78579", }, { db: "VULMON", id: "CVE-2015-0633", }, { db: "BID", id: "85711", }, { db: "BID", id: "72760", }, { db: "JVNDB", id: "JVNDB-2015-001628", }, { db: "NVD", id: "CVE-2015-0633", }, { db: "CNNVD", id: "CNNVD-201502-457", }, ], }, sources_release_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", data: { "@container": "@list", }, }, data: [ { date: "2015-02-26T00:00:00", db: "VULHUB", id: "VHN-78579", }, { date: "2015-02-26T00:00:00", db: "VULMON", id: "CVE-2015-0633", }, { date: "2015-12-10T00:00:00", db: "BID", id: "85711", }, { date: "2015-02-24T00:00:00", db: "BID", id: "72760", }, { date: "2015-02-27T00:00:00", db: "JVNDB", id: "JVNDB-2015-001628", }, { date: "2015-02-26T01:59:00.063000", db: "NVD", id: "CVE-2015-0633", }, { date: "2015-02-28T00:00:00", db: "CNNVD", id: "CNNVD-201502-457", }, ], }, sources_update_date: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", data: { "@container": "@list", }, }, data: [ { date: "2019-04-15T00:00:00", db: "VULHUB", id: "VHN-78579", }, { date: "2019-04-15T00:00:00", db: "VULMON", id: "CVE-2015-0633", }, { date: "2019-04-12T19:00:00", db: "BID", id: "85711", }, { date: "2015-03-19T07:34:00", db: "BID", id: "72760", }, { date: "2015-02-27T00:00:00", db: "JVNDB", id: "JVNDB-2015-001628", }, { date: "2019-04-15T12:30:08.180000", db: "NVD", id: "CVE-2015-0633", }, { date: "2019-04-19T00:00:00", db: "CNNVD", id: "CNNVD-201502-457", }, ], }, threat_type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "network", sources: [ { db: "BID", id: "85711", }, { db: "BID", id: "72760", }, ], trust: 0.6, }, title: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "C-Series Run on the server Cisco Unified Computing System of Integrated Management Controller Vulnerable to access restrictions", sources: [ { db: "JVNDB", id: "JVNDB-2015-001628", }, ], trust: 0.8, }, type: { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", sources: { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", }, }, }, data: "Failure to Handle Exceptional Conditions", sources: [ { db: "BID", id: "85711", }, { db: "BID", id: "72760", }, ], trust: 0.6, }, }