Vulnslist

find the latest Cisco vulnerabilities

Cisco Unified Computing System Central Software Privilege Escalation Vulnerability

Cisco-SA-20140219-CVE-2014-0730 · Medium · Published · Updated

A vulnerability in the local-mgmt context in Cisco Unified Computing System Central Software could allow an authenticated, local attacker to gain shell-level access to the affected device. The vulnerability is due to improper input validation in the copy command. An attacker could exploit this vulnerability by sending a crafted command in the command-line interface. Cisco has confirmed the vulnerability in a security notice; however, software updates are not available. To exploit this vulnerability, an attacker must have local access to the targeted device. This access requirement may decrease the likelihood of a successful exploit.

Cisco advisory ·CSAF JSON

Workarounds

Administrators are advised to contact the vendor regarding future updates and releases.

Administrators are advised to allow only trusted users to access local systems.

Administrators are advised to monitor affected systems.

CVEsCVE-2014-0730
Cisco Bug IDsCSCul53128
CVSS ScoreBase 6.8
Base 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C/E:H/RL:U/RC:C
Product Names From Source
Cisco Unified Computing System Central Software

CSAF Product Statuses

Product Status Source CVE Rows
Cisco Unified Computing System Central Software known_affected cisco_csaf CVE-2014-0730 1

Related Products

Product CVE Evidence
Cisco Unified Computing System Central Software CVE-2014-0730 Cisco OpenVuln