CVE-2018-15404: Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability
A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient restrictions on the size or total amount of resources allowed via the web interface. An attacker who has valid credentials for the application could exploit this vulnerability by sending a crafted or malformed HTTP request to the web interface. A successful exploit could allow the attacker to cause oversubscription of system resources or cause a component to become unresponsive, resulting in a DoS condition.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2018-15404.
What is the severity rating of CVE-2018-15404?
CVE-2018-15404 has a severity rating of 6.5 (medium).
What software is affected by CVE-2018-15404?
CVE-2018-15404 affects Cisco Unified Computing System Director 6.6(0.0) and Cisco Integrated Management Controller Supervisor 2.1(0.0).
How can an attacker exploit CVE-2018-15404?
An attacker can exploit CVE-2018-15404 by causing a denial of service (DoS) condition on an affected system.
Is there a fix available for CVE-2018-15404?
Yes, Cisco has released a fix for CVE-2018-15404. Please refer to the Cisco Security Advisory for more information.