Lucene search

K
nvd[email protected]NVD:CVE-2015-0633
HistoryFeb 26, 2015 - 1:59 a.m.

CVE-2015-0633

2015-02-2601:59:00
CWE-20
web.nvd.nist.gov
7

CVSS2

6.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:P/A:C

AI Score

6.5

Confidence

Low

EPSS

0.008

Percentile

82.1%

The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.

Affected configurations

Nvd
Node
ciscounified_computing_systemMatch1.4
OR
ciscounified_computing_systemMatch1.4\(1c\)
OR
ciscounified_computing_systemMatch1.4\(2\)
OR
ciscounified_computing_systemMatch1.4\(3c\)1
OR
ciscounified_computing_systemMatch1.4\(3c\)2
OR
ciscounified_computing_systemMatch1.4\(3j\)
OR
ciscounified_computing_systemMatch1.4\(3k\)
OR
ciscounified_computing_systemMatch1.4\(3p\)
OR
ciscounified_computing_systemMatch1.4\(3p\)5
OR
ciscounified_computing_systemMatch1.4\(3s\)
OR
ciscounified_computing_systemMatch1.4\(4a\)
OR
ciscounified_computing_systemMatch1.4\(4a\)1
OR
ciscounified_computing_systemMatch1.4\(5b\)1
OR
ciscounified_computing_systemMatch1.4\(5e\)
OR
ciscounified_computing_systemMatch1.4\(5g\)
OR
ciscounified_computing_systemMatch1.4\(5g\)2
OR
ciscounified_computing_systemMatch1.4\(5h\)
OR
ciscounified_computing_systemMatch1.4\(5j\)
OR
ciscounified_computing_systemMatch1.4\(6c\)
OR
ciscounified_computing_systemMatch1.4\(6d\)
OR
ciscounified_computing_systemMatch1.4\(7b\)1
OR
ciscounified_computing_systemMatch1.4\(7c\)1
OR
ciscounified_computing_systemMatch1.4\(7h\)
AND
ciscoc200_m1
OR
ciscoc200_m2
OR
ciscoc210_m2
OR
ciscoc22_m3
OR
ciscoc220_m3
OR
ciscoc220_m4
OR
ciscoc24_m3
OR
ciscoc240_m3
OR
ciscoc240_m4
OR
ciscoc250_m1
OR
ciscoc250_m2
OR
ciscoc260_m2
OR
ciscoc3160
OR
ciscoc420_m2
OR
ciscoc420_m3
OR
ciscoc460_m1
OR
ciscoc460_m2
OR
ciscoc460_m4
VendorProductVersionCPE
ciscounified_computing_system1.4cpe:2.3:a:cisco:unified_computing_system:1.4:*:*:*:*:*:*:*
ciscounified_computing_system1.4(1c)cpe:2.3:a:cisco:unified_computing_system:1.4\(1c\):*:*:*:*:*:*:*
ciscounified_computing_system1.4(2)cpe:2.3:a:cisco:unified_computing_system:1.4\(2\):*:*:*:*:*:*:*
ciscounified_computing_system1.4(3c)1cpe:2.3:a:cisco:unified_computing_system:1.4\(3c\)1:*:*:*:*:*:*:*
ciscounified_computing_system1.4(3c)2cpe:2.3:a:cisco:unified_computing_system:1.4\(3c\)2:*:*:*:*:*:*:*
ciscounified_computing_system1.4(3j)cpe:2.3:a:cisco:unified_computing_system:1.4\(3j\):*:*:*:*:*:*:*
ciscounified_computing_system1.4(3k)cpe:2.3:a:cisco:unified_computing_system:1.4\(3k\):*:*:*:*:*:*:*
ciscounified_computing_system1.4(3p)cpe:2.3:a:cisco:unified_computing_system:1.4\(3p\):*:*:*:*:*:*:*
ciscounified_computing_system1.4(3p)5cpe:2.3:a:cisco:unified_computing_system:1.4\(3p\)5:*:*:*:*:*:*:*
ciscounified_computing_system1.4(3s)cpe:2.3:a:cisco:unified_computing_system:1.4\(3s\):*:*:*:*:*:*:*
Rows per page:
1-10 of 411

CVSS2

6.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:P/A:C

AI Score

6.5

Confidence

Low

EPSS

0.008

Percentile

82.1%

Related for NVD:CVE-2015-0633