All the vulnerabilites related to cisco - c3160
Vulnerability from fkie_nvd
Published
2015-02-26 01:59
Modified
2024-11-21 02:23
Severity ?
Summary
The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4:*:*:*:*:*:*:*", "matchCriteriaId": "FDE26A38-91CF-4370-812B-7392493EFDC8", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(1c\\):*:*:*:*:*:*:*", "matchCriteriaId": "F36331E2-247F-4424-8180-8CAF148C902F", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(2\\):*:*:*:*:*:*:*", "matchCriteriaId": "B7D3105E-90F5-45CF-9F61-2C097C29F69F", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3c\\)1:*:*:*:*:*:*:*", "matchCriteriaId": "7405DFEA-AEBD-465E-9E8C-410F76ABD1B4", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3c\\)2:*:*:*:*:*:*:*", "matchCriteriaId": "5DCFCAD0-6AD7-4922-8590-C5AC6FCAD07B", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3j\\):*:*:*:*:*:*:*", "matchCriteriaId": "D2EBC379-6B6E-4163-99A1-59D9EFD25617", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3k\\):*:*:*:*:*:*:*", "matchCriteriaId": "897BEF05-B82F-40ED-BD61-82565414B8A3", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3p\\):*:*:*:*:*:*:*", "matchCriteriaId": "9705927D-AC90-4634-B1CF-4988CBFDED1F", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3p\\)5:*:*:*:*:*:*:*", "matchCriteriaId": "48E4E069-4533-496E-AE9F-53877ECAF012", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3s\\):*:*:*:*:*:*:*", "matchCriteriaId": "8A5476F9-F175-4DF2-8008-816DCA4C37C2", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4a\\):*:*:*:*:*:*:*", "matchCriteriaId": "52C45532-1567-431C-B34E-62DC5D06A031", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4a\\)1:*:*:*:*:*:*:*", "matchCriteriaId": "15E4FCD8-4873-45FB-A6DA-2126D3162A77", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5b\\)1:*:*:*:*:*:*:*", "matchCriteriaId": "69CC7E68-740F-43BF-A3DC-F534CA86DE57", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5e\\):*:*:*:*:*:*:*", "matchCriteriaId": "B6A8C33B-F5BA-4B06-A5FA-90A3C93906E3", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5g\\):*:*:*:*:*:*:*", "matchCriteriaId": "52006265-724E-420C-85FD-B3B36A5EBAB9", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5g\\)2:*:*:*:*:*:*:*", "matchCriteriaId": "9B134E5E-E98E-47A9-BE94-2BD18AB13EF4", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5h\\):*:*:*:*:*:*:*", "matchCriteriaId": "7352EFF1-6392-44CB-B3E8-72D9DFFD7DE1", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5j\\):*:*:*:*:*:*:*", "matchCriteriaId": "55C80AE3-D250-4B62-961B-6F50DA3C9C7D", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(6c\\):*:*:*:*:*:*:*", "matchCriteriaId": "7ED8A041-855A-47CB-ABCC-86F53EFFCF5F", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(6d\\):*:*:*:*:*:*:*", "matchCriteriaId": "AFA79800-A935-463F-82B4-C8A58B887A69", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7b\\)1:*:*:*:*:*:*:*", "matchCriteriaId": "9167071D-DE00-4C0B-AF5A-4982B74DB998", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7c\\)1:*:*:*:*:*:*:*", "matchCriteriaId": "9D118D6E-59F1-4E4A-BECA-92E98DCD3397", "vulnerable": true }, { "criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7h\\):*:*:*:*:*:*:*", "matchCriteriaId": "7A81D53E-82E0-4008-9C45-A0FDED7C8F22", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:cisco:c200_m1:*:*:*:*:*:*:*:*", "matchCriteriaId": "74DAA02E-56F2-4CC1-97CF-00E775FDE531", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c200_m2:*:*:*:*:*:*:*:*", "matchCriteriaId": "27BB731F-A20D-485E-B9F4-612ED6B58D59", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c210_m2:*:*:*:*:*:*:*:*", "matchCriteriaId": "3DFD3B18-5DCC-4E5E-A2BA-1F2F7C0D4DFC", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c22_m3:*:*:*:*:*:*:*:*", "matchCriteriaId": "3D3270DB-AF43-4E4A-ABFF-C5AA66427AD4", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c220_m3:*:*:*:*:*:*:*:*", "matchCriteriaId": "6FAB8C01-31F7-4071-92FF-0AD7B40BDDDF", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c220_m4:*:*:*:*:*:*:*:*", "matchCriteriaId": "915CDCF7-101B-47F8-AAF5-2B4805504997", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c24_m3:*:*:*:*:*:*:*:*", "matchCriteriaId": "618008DA-EB84-4F7C-BE79-3C76D53FFC0E", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c240_m3:*:*:*:*:*:*:*:*", "matchCriteriaId": "18ABBEBC-AF71-43EC-BE00-F77E6AF80CC8", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c240_m4:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD4A3A8B-0022-4406-84D7-0A1B002E6148", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c250_m1:*:*:*:*:*:*:*:*", "matchCriteriaId": "16EF4E36-4DD5-4C58-BE0F-DEFF81C6D438", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c250_m2:*:*:*:*:*:*:*:*", "matchCriteriaId": "242E34EB-AE1A-447F-82BB-580C5513C64E", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c260_m2:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B7D4502-0A1B-4D13-A1CF-5479BA802FDF", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c3160:*:*:*:*:*:*:*:*", "matchCriteriaId": "6385E303-B5AE-46B5-A2D3-23615B89B92C", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c420_m2:*:*:*:*:*:*:*:*", "matchCriteriaId": "3EA3B25A-37CB-4DF1-B510-4E1238085D7E", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c420_m3:*:*:*:*:*:*:*:*", "matchCriteriaId": "5D93C23B-AAD0-44B3-8144-80B2F4EF800C", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c460_m1:*:*:*:*:*:*:*:*", "matchCriteriaId": "C48649E1-949E-47AB-9DA1-1AE99C689766", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c460_m2:*:*:*:*:*:*:*:*", "matchCriteriaId": "9912EDFE-F113-4B71-9BE9-08E5AA7CEB12", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:c460_m4:*:*:*:*:*:*:*:*", "matchCriteriaId": "F373F2AC-E045-447C-9ADA-60B84F016691", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876." }, { "lang": "es", "value": "Integrated Management Controller (IMC) en Cisco Unified Computing System (UCS) 1.4(7h) y anteriores en los servidores de la serie C permite a atacantes remotos evadir las restricciones de acceso mediante el env\u00edo de paquetes manipulados de respuestas DHCP en la red local, tambi\u00e9n conocido como Bug ID CSCuf52876." } ], "id": "CVE-2015-0633", "lastModified": "2024-11-21T02:23:26.437", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:C", "version": "2.0" }, "exploitabilityScore": 6.5, "impactScore": 7.8, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ] }, "published": "2015-02-26T01:59:00.063", "references": [ { "source": "ykramarz@cisco.com", "tags": [ "Vendor Advisory" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633" }, { "source": "ykramarz@cisco.com", "tags": [ "Vendor Advisory" ], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575" }, { "source": "ykramarz@cisco.com", "url": "http://www.securityfocus.com/bid/72760" }, { "source": "ykramarz@cisco.com", "url": "http://www.securityfocus.com/bid/85711" }, { "source": "ykramarz@cisco.com", "url": "http://www.securitytracker.com/id/1031796" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/72760" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/85711" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1031796" } ], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
var-201502-0157
Vulnerability from variot
The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876. Cisco Unified Computing System C-Series are prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to cause a denial-of-service condition, denying service to legitimate users. This issue is being tracked by Cisco Bug ID CSCuf52876. There is a security vulnerability in IMC in Cisco UCS 1.4(7h) and earlier versions of C-Series servers
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201502-0157", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "unified computing system", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.4\\(7c\\)1" }, { "model": "unified computing system", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.4\\(5j\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.4\\(7h\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.4" }, { "model": "unified computing system", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.4\\(2\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.4\\(5g\\)2" }, { "model": "unified computing system", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.4\\(6d\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.4\\(1c\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.4\\(5h\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "1.4\\(7b\\)1" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(4a\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(5b\\)1" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(3c\\)1" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(3j\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(3p\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(6c\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(4a\\)1" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(3s\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(3k\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(3c\\)2" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(3p\\)5" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(5e\\)" }, { "model": "unified computing system", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "1.4\\(5g\\)" }, { "model": "c200-m1", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c200-m2", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c210-m2", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c22-m3", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c220-m3", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c220-m4", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c24-m3", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c240-m3", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c240-m4", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c250-m1", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c250-m2", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c260-m2", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c3160", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c420-m2", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c420-m3", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c460-m1", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c460-m2", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "c460-m4", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "unified computing system software", "scope": "lte", "trust": 0.8, "vendor": "cisco", "version": "1.4(7h)" }, { "model": "unified computing system 2.2 a", "scope": null, "trust": 0.3, "vendor": "cisco", "version": null } ], "sources": [ { "db": "BID", "id": "85711" }, { "db": "JVNDB", "id": "JVNDB-2015-001628" }, { "db": "NVD", "id": "CVE-2015-0633" }, { "db": "CNNVD", "id": "CNNVD-201502-457" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3j\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3k\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5e\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5g\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5g\\)2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7h\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(1c\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(2\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3s\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4a\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(6c\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(6d\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3p\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3p\\)5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5h\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5j\\):*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3c\\)2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3c\\)1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4a\\)1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(5b\\)1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7b\\)1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(7c\\)1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:h:cisco:c240_m4:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c240_m3:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c210_m2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c200_m2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c460_m2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c420_m2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c24_m3:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c22_m3:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c3160:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c460_m4:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c220_m4:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c220_m3:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c200_m1:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c420_m3:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c260_m2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c460_m1:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c250_m2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false }, { "cpe23Uri": "cpe:2.3:h:cisco:c250_m1:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false } ], "operator": "OR" } ], "cpe_match": [], "operator": "AND" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2015-0633" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco", "sources": [ { "db": "BID", "id": "85711" }, { "db": "BID", "id": "72760" }, { "db": "CNNVD", "id": "CNNVD-201502-457" } ], "trust": 1.2 }, "cve": "CVE-2015-0633", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "NONE", "exploitabilityScore": 6.5, "impactScore": 7.8, "integrityImpact": "PARTIAL", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Adjacent Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 6.8, "confidentialityImpact": "None", "exploitabilityScore": null, "id": "CVE-2015-0633", "impactScore": null, "integrityImpact": "Partial", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "Medium", "trust": 0.9, "userInteractionRequired": null, "vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "NONE", "exploitabilityScore": 6.5, "id": "VHN-78579", "impactScore": 7.8, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:A/AC:L/AU:N/C:N/I:P/A:C", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "NVD", "id": "CVE-2015-0633", "trust": 1.8, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-201502-457", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-78579", "trust": 0.1, "value": "MEDIUM" }, { "author": "VULMON", "id": "CVE-2015-0633", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-78579" }, { "db": "VULMON", "id": "CVE-2015-0633" }, { "db": "JVNDB", "id": "JVNDB-2015-001628" }, { "db": "NVD", "id": "CVE-2015-0633" }, { "db": "CNNVD", "id": "CNNVD-201502-457" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876. Cisco Unified Computing System C-Series are prone to a remote denial-of-service vulnerability. \nAttackers can exploit this issue to cause a denial-of-service condition, denying service to legitimate users. \nThis issue is being tracked by Cisco Bug ID CSCuf52876. There is a security vulnerability in IMC in Cisco UCS 1.4(7h) and earlier versions of C-Series servers", "sources": [ { "db": "NVD", "id": "CVE-2015-0633" }, { "db": "JVNDB", "id": "JVNDB-2015-001628" }, { "db": "BID", "id": "85711" }, { "db": "BID", "id": "72760" }, { "db": "VULHUB", "id": "VHN-78579" }, { "db": "VULMON", "id": "CVE-2015-0633" } ], "trust": 2.34 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2015-0633", "trust": 3.2 }, { "db": "BID", "id": "72760", "trust": 2.1 }, { "db": "BID", "id": "85711", "trust": 2.1 }, { "db": "SECTRACK", "id": "1031796", "trust": 1.8 }, { "db": "JVNDB", "id": "JVNDB-2015-001628", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201502-457", "trust": 0.7 }, { "db": "VULHUB", "id": "VHN-78579", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2015-0633", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-78579" }, { "db": "VULMON", "id": "CVE-2015-0633" }, { "db": "BID", "id": "85711" }, { "db": "BID", "id": "72760" }, { "db": "JVNDB", "id": "JVNDB-2015-001628" }, { "db": "NVD", "id": "CVE-2015-0633" }, { "db": "CNNVD", "id": "CNNVD-201502-457" } ] }, "id": "VAR-201502-0157", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-78579" } ], "trust": 0.7714285599999999 }, "last_update_date": "2023-12-18T12:51:47.497000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability", "trust": 0.8, "url": "http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2015-0633" }, { "title": "37575", "trust": 0.8, "url": "http://tools.cisco.com/security/center/viewalert.x?alertid=37575" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2015-001628" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-20", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-78579" }, { "db": "JVNDB", "id": "JVNDB-2015-001628" }, { "db": "NVD", "id": "CVE-2015-0633" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.5, "url": "http://www.securityfocus.com/bid/85711" }, { "trust": 1.8, "url": "http://www.securityfocus.com/bid/72760" }, { "trust": 1.8, "url": "http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2015-0633" }, { "trust": 1.8, "url": "http://tools.cisco.com/security/center/viewalert.x?alertid=37575" }, { "trust": 1.8, "url": "http://www.securitytracker.com/id/1031796" }, { "trust": 1.2, "url": "http://www.cisco.com/" }, { "trust": 0.9, "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20151210-ucs" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-0633" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-0633" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/20.html" }, { "trust": 0.1, "url": "https://nvd.nist.gov" } ], "sources": [ { "db": "VULHUB", "id": "VHN-78579" }, { "db": "VULMON", "id": "CVE-2015-0633" }, { "db": "BID", "id": "85711" }, { "db": "BID", "id": "72760" }, { "db": "JVNDB", "id": "JVNDB-2015-001628" }, { "db": "NVD", "id": "CVE-2015-0633" }, { "db": "CNNVD", "id": "CNNVD-201502-457" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-78579" }, { "db": "VULMON", "id": "CVE-2015-0633" }, { "db": "BID", "id": "85711" }, { "db": "BID", "id": "72760" }, { "db": "JVNDB", "id": "JVNDB-2015-001628" }, { "db": "NVD", "id": "CVE-2015-0633" }, { "db": "CNNVD", "id": "CNNVD-201502-457" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2015-02-26T00:00:00", "db": "VULHUB", "id": "VHN-78579" }, { "date": "2015-02-26T00:00:00", "db": "VULMON", "id": "CVE-2015-0633" }, { "date": "2015-12-10T00:00:00", "db": "BID", "id": "85711" }, { "date": "2015-02-24T00:00:00", "db": "BID", "id": "72760" }, { "date": "2015-02-27T00:00:00", "db": "JVNDB", "id": "JVNDB-2015-001628" }, { "date": "2015-02-26T01:59:00.063000", "db": "NVD", "id": "CVE-2015-0633" }, { "date": "2015-02-28T00:00:00", "db": "CNNVD", "id": "CNNVD-201502-457" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2019-04-15T00:00:00", "db": "VULHUB", "id": "VHN-78579" }, { "date": "2019-04-15T00:00:00", "db": "VULMON", "id": "CVE-2015-0633" }, { "date": "2019-04-12T19:00:00", "db": "BID", "id": "85711" }, { "date": "2015-03-19T07:34:00", "db": "BID", "id": "72760" }, { "date": "2015-02-27T00:00:00", "db": "JVNDB", "id": "JVNDB-2015-001628" }, { "date": "2019-04-15T12:30:08.180000", "db": "NVD", "id": "CVE-2015-0633" }, { "date": "2019-04-19T00:00:00", "db": "CNNVD", "id": "CNNVD-201502-457" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "network", "sources": [ { "db": "BID", "id": "85711" }, { "db": "BID", "id": "72760" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "C-Series Run on the server Cisco Unified Computing System of Integrated Management Controller Vulnerable to access restrictions", "sources": [ { "db": "JVNDB", "id": "JVNDB-2015-001628" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Failure to Handle Exceptional Conditions", "sources": [ { "db": "BID", "id": "85711" }, { "db": "BID", "id": "72760" } ], "trust": 0.6 } }
cve-2015-0633
Vulnerability from cvelistv5
Published
2015-02-26 01:00
Modified
2024-08-06 04:17
Severity ?
EPSS score ?
Summary
The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.
References
▼ | URL | Tags |
---|---|---|
http://www.securitytracker.com/id/1031796 | vdb-entry, x_refsource_SECTRACK | |
http://tools.cisco.com/security/center/viewAlert.x?alertId=37575 | x_refsource_CONFIRM | |
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633 | vendor-advisory, x_refsource_CISCO | |
http://www.securityfocus.com/bid/72760 | vdb-entry, x_refsource_BID | |
http://www.securityfocus.com/bid/85711 | vdb-entry, x_refsource_BID |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T04:17:32.464Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "1031796", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://www.securitytracker.com/id/1031796" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575" }, { "name": "20150224 Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability", "tags": [ "vendor-advisory", "x_refsource_CISCO", "x_transferred" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633" }, { "name": "72760", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/72760" }, { "name": "85711", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/85711" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2015-02-24T00:00:00", "descriptions": [ { "lang": "en", "value": "The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2019-04-12T20:06:02", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco" }, "references": [ { "name": "1031796", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://www.securitytracker.com/id/1031796" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575" }, { "name": "20150224 Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability", "tags": [ "vendor-advisory", "x_refsource_CISCO" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633" }, { "name": "72760", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/72760" }, { "name": "85711", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/85711" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "psirt@cisco.com", "ID": "CVE-2015-0633", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "1031796", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1031796" }, { "name": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575", "refsource": "CONFIRM", "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=37575" }, { "name": "20150224 Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633" }, { "name": "72760", "refsource": "BID", "url": "http://www.securityfocus.com/bid/72760" }, { "name": "85711", "refsource": "BID", "url": "http://www.securityfocus.com/bid/85711" } ] } } } }, "cveMetadata": { "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2015-0633", "datePublished": "2015-02-26T01:00:00", "dateReserved": "2015-01-07T00:00:00", "dateUpdated": "2024-08-06T04:17:32.464Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }