CVE-2015-4183
HighSummary
Cisco UCS Central Software version 1.2(1a) allows local users to gain privileges for OS command execution via a crafted CLI parameter.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the operating system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Cisco UCS Central Software to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Cisco UCS Central Software
See all- CVE-2015-0701High
Cisco UCS Central Software before version 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request.
- CVE-2026-76506High
A vulnerability in the web-based management interface of Cisco UCS Central Software is due to insufficient validation of user-supplied input in an HTTP request. An authenticated remote attacker could send a crafted request to execute arbitrary commands, write arbitrary files to the filesystem, or obtain sensitive information.
Original NVD description (English source)
Cisco UCS Central Software 1.2(1a) allows local users to gain privileges for OS command execution via a crafted CLI parameter, aka Bug ID CSCut32795.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS