ZDI-20-543: Cisco UCS Director saveStaticConfig Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco UCS Director. Authentication is not required to exploit this vulnerability. The specific flaw exists within the saveStaticConfig method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-20-543?
The severity of ZDI-20-543 is critical due to its potential for arbitrary code execution without authentication.
How do I fix ZDI-20-543?
To fix ZDI-20-543, it is recommended to apply the latest security patches provided by Cisco for UCS Director.
What types of attacks can exploit ZDI-20-543?
ZDI-20-543 can be exploited by remote attackers to execute arbitrary code on vulnerable systems.
Who is affected by ZDI-20-543?
Organizations using vulnerable versions of Cisco UCS Director are at risk of ZDI-20-543.
Is authentication required to exploit ZDI-20-543?
No, authentication is not required to exploit ZDI-20-543, making it particularly dangerous.