4.3 Moyenne

CVE-2021-1354 A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could…

Description

A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the registration API. A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Unified Computing System Central Software	Versions non publiées

Références

20210203 Cisco Unified Computing System Central Software Improper Certificate Validation Vulnerability tools.cisco.com

Chronologie

Publiée 4 février 2021
Dernière modification 8 novembre 2024

Les 3 CVE de Cisco Unified Computing System Central Software →

CVE-2026-76506 Cisco Unified Computing System Central Remote Code Execution Vulnerability 7.6 Élevée CVE-2024-20280 A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file… 6.3 Moyenne

Suivre cette CVE