7.8 Élevée

CVE-2019-1966 A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric…

Description

A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to gain elevated privileges as the root user on an affected device. The vulnerability is due to extraneous subcommand options present for a specific CLI command within the local-mgmt context. An attacker could exploit this vulnerability by authenticating to an affected device, entering the local-mgmt context, and issuing a specific CLI command and submitting user input. A successful exploit could allow the attacker to execute arbitrary operating system commands as root on an affected device. The attacker would need to have valid user credentials for the device.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Unified Computing System (Managed)	Versions non publiées

Références

20190828 Cisco Unified Computing System Fabric Interconnect root Privilege Escalation Vulnerability tools.cisco.com

Chronologie

Publiée 29 août 2019
Dernière modification 20 novembre 2024

Les 41 CVE de Cisco Unified Computing System (Managed) →

CVE-2026-76458 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 8.6 Élevée CVE-2026-76459 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 9.8 Critique CVE-2026-76471 A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute… 9.8 Critique CVE-2026-76455 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 9.8 Critique

Suivre cette CVE