6.5
Medium
CVE-2020-3241 A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to…
Description
A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to perform a path traversal attack on an affected device. The vulnerability is due to insufficient validation of user-supplied input on the web-based management interface. An attacker could exploit this vulnerability by creating a task with specific configuration parameters. A successful exploit could allow the attacker to overwrite arbitrary files in the file system of an affected device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Unified Computing System (Management Software) | Versions not published |
References
- 20200617 Cisco UCS Director Path Traversal Vulnerability tools.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Unified Computing System (Management Software)
The 14 CVEs of Cisco Unified Computing System (Management Software) →
CVE-2020-3242
A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with…
4.9
Medium
CVE-2019-1907
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote…
8.8
High
CVE-2019-1908
A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management…
7.5
High
CVE-2019-1885
A vulnerability in the Redfish protocol of Cisco Integrated Management Controller (IMC) could allow an authenticated,…
7.2
High