Cisco Unified Computing System Integrated Management Controller vulnerabilities

4 CVEs affecting Cisco Unified Computing System Integrated Management Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1186, published 2013-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-1182, published 2013-04-25. High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days. The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication…
CVE-2013-1186, published 2013-04-25. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated…
CVE-2013-1185, published 2013-04-25. High severity, CVSS 9.3. EPSS: 1.8% chance of exploitation in the next 30 days. The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1)…
CVE-2013-1184, published 2013-04-25. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The management API in the XML API management service in the Manager component in Cisco Unified Computing System (UCS) 1.x before 1.2(1b) allows remote attackers to cause a denial of service (service…