CVE-2015-0701
HighSummary
Cisco UCS Central Software before version 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request.
Risk Assessment
An attacker could remotely take control of the system, leading to serious security breaches and data loss.
Recommendation
It is recommended to update the software to version 1.3(1a) or later to mitigate this vulnerability.
Other vulnerabilities in Cisco UCS Central Software
See all- CVE-2015-4183High
Cisco UCS Central Software version 1.2(1a) allows local users to gain privileges for OS command execution via a crafted CLI parameter.
- CVE-2026-76506High
A vulnerability in the web-based management interface of Cisco UCS Central Software is due to insufficient validation of user-supplied input in an HTTP request. An authenticated remote attacker could send a crafted request to execute arbitrary commands, write arbitrary files to the filesystem, or obtain sensitive information.
Original NVD description (English source)
Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS