cisco-sa-ucs-cli-dos-GQUxCnTe: Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability
First published: Wed Aug 26 2020(Updated: )
A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of CLI command parameters. An attacker could exploit this vulnerability by executing specific commands on the local-mgmt CLI on an affected device. A successful exploit could allow the attacker to cause internal system processes to fail to terminate properly, which could result in a buildup of stuck processes and lead to slowness in accessing the UCS Manager CLI and web UI. A sustained attack may result in a restart of internal UCS Manager processes and a temporary loss of access to the UCS Manager CLI and web UI. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-cli-dos-GQUxCnTe
Credit: This vulnerability was found by Art Kalmykov Cisco during internal security testing
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco UCS Software | =4.0<4.0(4i) | 4.0(4i) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco UCS Manager Software vulnerability?
The vulnerability ID for this Cisco UCS Manager Software vulnerability is cisco-sa-ucs-cli-dos-GQUxCnTe.
What is the title of this vulnerability?
The title of this vulnerability is Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability.
What is the severity rating for this vulnerability?
The severity rating for this vulnerability is low (3.3).
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by using the local management (local-mgmt) CLI of Cisco UCS Manager Software to cause a denial of service (DoS) condition on an affected device.
Is there a fix available for this vulnerability?
Yes, Cisco UCS Manager Software version 4.0(4i) or higher includes a fix for this vulnerability.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/severity
- agent/title
- agent/author
- agent/references
- agent/weakness
- agent/tags
- agent/description
- agent/event
- vendor/cisco
- canonical/cisco ucs software
- version/cisco ucs software/4.0