CVE-2018-0113: Input Validation
A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting a crafted request to the user interface of Cisco UCS Central. This vulnerability affects Cisco UCS Central Software prior to Release 2.0(1c). Cisco Bug IDs: CSCve70825.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-0113?
CVE-2018-0113 is a vulnerability in an operations script of Cisco UCS Central that could allow an authenticated remote attacker to execute arbitrary shell commands with the privileges of the daemon user.
What is the severity of CVE-2018-0113?
The severity of CVE-2018-0113 is high, with a severity value of 8.8.
How can an attacker exploit CVE-2018-0113?
An attacker can exploit CVE-2018-0113 by posting malicious input to the vulnerable script.
What is the affected software?
The affected software is Cisco Unified Computing System Central Software version 1.5(1c).
How can I fix CVE-2018-0113?
To fix CVE-2018-0113, Cisco recommends applying the necessary updates and patches provided in the security advisory.