Arbitrary Command Execution in Cisco UCS Central Software

CVE-2015-0701

Summary

Cisco UCS Central Software prior to version 1.3(1a) is susceptible to a vulnerability that allows remote attackers to execute arbitrary commands. This can be exploited through a specially crafted HTTP request, potentially leading to the compromise of system integrity and unauthorized access to sensitive information. Organizations using affected versions must take immediate action to mitigate this risk by applying the provided security updates.

References