CVE-2020-3241: Cisco UCS Director Path Traversal Vulnerability
A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to perform a path traversal attack on an affected device. The vulnerability is due to insufficient validation of user-supplied input on the web-based management interface. An attacker could exploit this vulnerability by creating a task with specific configuration parameters. A successful exploit could allow the attacker to overwrite arbitrary files in the file system of an affected device.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-3241?
CVE-2020-3241 is a vulnerability in the orchestration tasks of Cisco UCS Director that could allow an authenticated remote attacker to perform a path traversal attack on an affected device.
What is the severity of CVE-2020-3241?
The severity of CVE-2020-3241 is high, with a CVSS score of 6.5.
How does CVE-2020-3241 affect Cisco UCS Director?
CVE-2020-3241 affects Cisco UCS Director versions up to and excluding 6.7.4.0.
What is the Common Vulnerabilities and Exposures (CVE) ID for this vulnerability?
The Common Vulnerabilities and Exposures (CVE) ID for this vulnerability is CVE-2020-3241.
Is there a fix available for CVE-2020-3241?
Yes, Cisco has provided a security advisory with mitigation details for CVE-2020-3241. Please refer to the reference link for more information.