Cisco UCS B-Series Vulnerability: Command Injection Attacks and Elevated Privileges
CVE-2024-20365
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 2 October 2024
What is CVE-2024-20365?
A security vulnerability exists within the Redfish API utilized in Cisco UCS B-Series, UCS Managed C-Series, and UCS X-Series Servers. The vulnerability is the result of inadequate input validation, allowing a remote attacker with administrative access to potentially execute crafted commands on the system. This exploit can lead to elevated privileges up to root level, compromising the integrity and security of the affected server. It is crucial for organizations using these products to implement security measures and apply any available patches to mitigate the risks associated with this vulnerability.
Affected Version(s)
Cisco Unified Computing System (Managed) 4.1(2a)
Cisco Unified Computing System (Managed) 4.1(2b)
Cisco Unified Computing System (Managed) 4.1(3a)