CVE-2015-0633: Input Validation
First published: Thu Feb 26 2015(Updated: )
The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Computing System | =1.4 | |
| Cisco Unified Computing System | =1.4\(1c\) | |
| Cisco Unified Computing System | =1.4\(2\) | |
| Cisco Unified Computing System | =1.4\(3c\)1 | |
| Cisco Unified Computing System | =1.4\(3c\)2 | |
| Cisco Unified Computing System | =1.4\(3j\) | |
| Cisco Unified Computing System | =1.4\(3k\) | |
| Cisco Unified Computing System | =1.4\(3p\) | |
| Cisco Unified Computing System | =1.4\(3p\)5 | |
| Cisco Unified Computing System | =1.4\(3s\) | |
| Cisco Unified Computing System | =1.4\(4a\) | |
| Cisco Unified Computing System | =1.4\(4a\)1 | |
| Cisco Unified Computing System | =1.4\(5b\)1 | |
| Cisco Unified Computing System | =1.4\(5e\) | |
| Cisco Unified Computing System | =1.4\(5g\) | |
| Cisco Unified Computing System | =1.4\(5g\)2 | |
| Cisco Unified Computing System | =1.4\(5h\) | |
| Cisco Unified Computing System | =1.4\(5j\) | |
| Cisco Unified Computing System | =1.4\(6c\) | |
| Cisco Unified Computing System | =1.4\(6d\) | |
| Cisco Unified Computing System | =1.4\(7b\)1 | |
| Cisco Unified Computing System | =1.4\(7c\)1 | |
| Cisco Unified Computing System | =1.4\(7h\) | |
| Cisco C200 M1 | ||
| Cisco C200 M2 | ||
| Cisco C210 M2 | ||
| Cisco C22 M3 | ||
| Cisco C220 M3 | ||
| Cisco C220 M4 | ||
| Cisco C24 M3 | ||
| Cisco C240 M3 | ||
| Cisco C240 M4 | ||
| Cisco C250 M1 | ||
| Cisco C250 M2 | ||
| Cisco C260 M2 | ||
| Cisco C3160 | ||
| Cisco C420 M2 | ||
| Cisco C420 M3 | ||
| Cisco C460 M1 | ||
| Cisco C460 M2 | ||
| Cisco C460 M4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- vendor/cisco
- canonical/cisco unified computing system
- version/cisco unified computing system/1.4
- version/cisco unified computing system/1.4\(1c\)
- version/cisco unified computing system/1.4\(2\)
- version/cisco unified computing system/1.4\(3c\)1
- version/cisco unified computing system/1.4\(3c\)2
- version/cisco unified computing system/1.4\(3j\)
- version/cisco unified computing system/1.4\(3k\)
- version/cisco unified computing system/1.4\(3p\)
- version/cisco unified computing system/1.4\(3p\)5
- version/cisco unified computing system/1.4\(3s\)
- version/cisco unified computing system/1.4\(4a\)
- version/cisco unified computing system/1.4\(4a\)1
- version/cisco unified computing system/1.4\(5b\)1
- version/cisco unified computing system/1.4\(5e\)
- version/cisco unified computing system/1.4\(5g\)
- version/cisco unified computing system/1.4\(5g\)2
- version/cisco unified computing system/1.4\(5h\)
- version/cisco unified computing system/1.4\(5j\)
- version/cisco unified computing system/1.4\(6c\)
- version/cisco unified computing system/1.4\(6d\)
- version/cisco unified computing system/1.4\(7b\)1
- version/cisco unified computing system/1.4\(7c\)1
- version/cisco unified computing system/1.4\(7h\)
- canonical/cisco c200 m1
- canonical/cisco c200 m2
- canonical/cisco c210 m2
- canonical/cisco c22 m3
- canonical/cisco c220 m3
- canonical/cisco c220 m4
- canonical/cisco c24 m3
- canonical/cisco c240 m3
- canonical/cisco c240 m4
- canonical/cisco c250 m1
- canonical/cisco c250 m2
- canonical/cisco c260 m2
- canonical/cisco c3160
- canonical/cisco c420 m2
- canonical/cisco c420 m3
- canonical/cisco c460 m1
- canonical/cisco c460 m2
- canonical/cisco c460 m4