Cisco Unified Computing System 6296up Fabric Interconnect vulnerabilities

8 CVEs affecting Cisco Unified Computing System 6296up Fabric Interconnect, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3261, published 2014-05-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-1183, published 2013-04-25. High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days. Buffer overflow in the Intelligent Platform Management Interface (IPMI) functionality in the Manager component in Cisco Unified Computing System (UCS) 1.0 and 1.1 before 1.1(1j) and 1.2 before…
CVE-2013-1182, published 2013-04-25. High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days. The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication…
CVE-2013-1186, published 2013-04-25. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated…
CVE-2014-3261, published 2014-05-26. High severity, CVSS 7.6. EPSS: 2% chance of exploitation in the next 30 days. Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on Nexus 3000 devices,…
CVE-2013-1181, published 2013-04-25. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.0(3)N2(2), Nexus 3000 devices 5.x before 5.0(3)U3(2), and Unified Computing System (UCS) 6200 devices before 2.0(1w) allows remote attackers to…
CVE-2013-1185, published 2013-04-25. High severity, CVSS 9.3. EPSS: 1.8% chance of exploitation in the next 30 days. The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1)…
CVE-2013-1178, published 2013-04-25. High severity, CVSS 8.3. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x…
CVE-2013-1184, published 2013-04-25. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The management API in the XML API management service in the Manager component in Cisco Unified Computing System (UCS) 1.x before 1.2(1b) allows remote attackers to cause a denial of service (service…