Cisco Unified Computing System CVE-2012-1313 Local Arbitrary Command Execution Vulnerability
BID:62680
Info
Cisco Unified Computing System CVE-2012-1313 Local Arbitrary Command Execution Vulnerability
| Bugtraq ID: | 62680 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-1313 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 26 2013 12:00AM |
| Updated: | Sep 26 2013 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Cisco Unified Computing System (UCS) 2.1 Cisco Unified Computing System (UCS) 2.0(3c) Cisco Unified Computing System (UCS) 2.0(3a) Cisco Unified Computing System (UCS) 2.0(2r) Cisco Unified Computing System (UCS) 2.0(2q) Cisco Unified Computing System (UCS) 2.0(2m) Cisco Unified Computing System (UCS) 2.0(1m) Cisco Unified Computing System (UCS) 2.0 Cisco Unified Computing System (UCS) 1.4(4k) Cisco Unified Computing System (UCS) 1.4(4j) Cisco Unified Computing System (UCS) 1.4(4i) Cisco Unified Computing System (UCS) 1.4(4g) Cisco Unified Computing System (UCS) 1.4(4f) Cisco Unified Computing System (UCS) 1.4(3y) Cisco Unified Computing System (UCS) 1.4(3u) Cisco Unified Computing System (UCS) 1.4(3s) Cisco Unified Computing System (UCS) 1.4(3q) Cisco Unified Computing System (UCS) 1.4(3m) Cisco Unified Computing System (UCS) 1.4(3l) Cisco Unified Computing System (UCS) 1.4(3i) Cisco Unified Computing System (UCS) 1.4(1m) Cisco Unified Computing System (UCS) 1.4(1j) Cisco Unified Computing System (UCS) 1.4(1i) Cisco Unified Computing System (UCS) 1.4 Cisco Unified Computing System (UCS) 1.3(1y) Cisco Unified Computing System (UCS) 1.3(1w) Cisco Unified Computing System (UCS) 1.3(1t) Cisco Unified Computing System (UCS) 1.3(1q) Cisco Unified Computing System (UCS) 1.3(1p) Cisco Unified Computing System (UCS) 1.3(1o) Cisco Unified Computing System (UCS) 1.3(1n) Cisco Unified Computing System (UCS) 1.3(1m) Cisco Unified Computing System (UCS) 1.3(1c) Cisco Unified Computing System (UCS) 1.3 Cisco Unified Computing System (UCS) 1.2(1d) Cisco Unified Computing System (UCS) 1.2 Cisco Unified Computing System (UCS) 1.1(1m) Cisco Unified Computing System (UCS) 1.1 Cisco Unified Computing System (UCS) 1.0(2k) Cisco Unified Computing System (UCS) 1.0 Cisco Unified Computing System 2.0(1w) Cisco Unified Computing System 2.0(1t) Cisco Unified Computing System 2.0(1s) Cisco Unified Computing System 2.0(1q) |
| Not Vulnerable: | |
Discussion
Cisco Unified Computing System CVE-2012-1313 Local Arbitrary Command Execution Vulnerability
Cisco Unified Computing System is prone to a local arbitrary command-execution vulnerability.
A local attacker can exploit this issue to execute arbitrary commands with elevated privileges. Successful exploits may compromise the affected device.
This issue being tracked by Cisco Bug ID CSCub13772.
Cisco Unified Computing System is prone to a local arbitrary command-execution vulnerability.
A local attacker can exploit this issue to execute arbitrary commands with elevated privileges. Successful exploits may compromise the affected device.
This issue being tracked by Cisco Bug ID CSCub13772.
Exploit / POC
Cisco Unified Computing System CVE-2012-1313 Local Arbitrary Command Execution Vulnerability
Attackers require local interactive access to exploit this issue.
Attackers require local interactive access to exploit this issue.
Solution / Fix
Cisco Unified Computing System CVE-2012-1313 Local Arbitrary Command Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Unified Computing System CVE-2012-1313 Local Arbitrary Command Execution Vulnerability
References:
References: