ZDI-CAN-9596: Cisco UCS Director saveStaticConfig Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco UCS Director. Authentication is not required to exploit this vulnerability. The specific flaw exists within the saveStaticConfig method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-9596?
The severity of ZDI-CAN-9596 is rated as critical due to its ability to allow remote attackers to execute arbitrary code.
How do I fix ZDI-CAN-9596?
To fix ZDI-CAN-9596, update Cisco UCS Director to the latest version as recommended by Cisco's security advisory.
Are there any prerequisites to exploit ZDI-CAN-9596?
No authentication is required to exploit ZDI-CAN-9596, making it accessible to remote attackers.
What impact does ZDI-CAN-9596 have on Cisco UCS Director?
ZDI-CAN-9596 allows attackers to execute arbitrary code on affected installations of Cisco UCS Director.
Which versions of Cisco UCS Director are affected by ZDI-CAN-9596?
The specific versions affected by ZDI-CAN-9596 are detailed in the Cisco security advisory for UCS Director.