Skip to content
fr Sign in
6.5 Medium

CVE-2025-20294 Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an…

Description

Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root.   These vulnerabilities are due to insufficient input validation of command arguments supplied by the user. An attacker could exploit these vulnerabilities by authenticating to a device and submitting crafted input to the affected commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of the affected device with root-level privileges.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Computing System (Managed) Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Computing System (Managed)

The 41 CVEs of Cisco Unified Computing System (Managed) →
CVE-2026-76458 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 8.6 High CVE-2026-76459 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 9.8 Critical CVE-2026-76471 A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute… 9.8 Critical CVE-2026-76455 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 9.8 Critical
Track this CVE