Vulnerability Name:

CVE-2013-1186 (CCN-83774)

Assigned:2013-04-24
Published:2013-04-24
Updated:2013-05-02
Summary:Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-287
Vulnerability Consequences:Bypass Security
References:Source: MITRE
Type: CNA
CVE-2013-1186

Source: CCN
Type: SA53188
Cisco Unified Computing System Multiple Vulnerabilities

Source: CCN
Type: cisco-sa-20130424-ucsmulti
Multiple Vulnerabilities in Cisco Unified Computing System

Source: CISCO
Type: Vendor Advisory
20130424 Multiple Vulnerabilities in Cisco Unified Computing System

Source: CCN
Type: BID-59455
Cisco Unified Computing System KVM Remote Authentication Bypass Vulnerability

Source: XF
Type: UNKNOWN
cisco-cve20131186-sec-bypass(83774)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.0:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.0(2k):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.1:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.1(1m):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2(1):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2(1a):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2(1d):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1c):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1m):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1n):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1o):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1p):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1q):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1t):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1w):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3(1y):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(1j):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(1m):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3i):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3l):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3m):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3q):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3s):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3u):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4(3y):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0(1q):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0(1s):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0(1t):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0(1w):*:*:*:*:*:*:*
  • OR cpe:/o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0(1x):*:*:*:*:*:*:*
  • AND
  • cpe:/h:cisco:unified_computing_system_6120xp_fabric_interconnect:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:unified_computing_system_6140xp_fabric_interconnect:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:unified_computing_system_6248up_fabric_interconnect:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:unified_computing_system_6296up_fabric_interconnect:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:unified_computing_system_integrated_management_controller:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    cisco unified computing system infrastructure and unified computing system software 1.0
    cisco unified computing system infrastructure and unified computing system software 1.0(2k)
    cisco unified computing system infrastructure and unified computing system software 1.1
    cisco unified computing system infrastructure and unified computing system software 1.1(1m)
    cisco unified computing system infrastructure and unified computing system software 1.2
    cisco unified computing system infrastructure and unified computing system software 1.2(1)
    cisco unified computing system infrastructure and unified computing system software 1.2(1a)
    cisco unified computing system infrastructure and unified computing system software 1.2(1d)
    cisco unified computing system infrastructure and unified computing system software 1.3(1c)
    cisco unified computing system infrastructure and unified computing system software 1.3(1m)
    cisco unified computing system infrastructure and unified computing system software 1.3(1n)
    cisco unified computing system infrastructure and unified computing system software 1.3(1o)
    cisco unified computing system infrastructure and unified computing system software 1.3(1p)
    cisco unified computing system infrastructure and unified computing system software 1.3(1q)
    cisco unified computing system infrastructure and unified computing system software 1.3(1t)
    cisco unified computing system infrastructure and unified computing system software 1.3(1w)
    cisco unified computing system infrastructure and unified computing system software 1.3(1y)
    cisco unified computing system infrastructure and unified computing system software 1.4(1j)
    cisco unified computing system infrastructure and unified computing system software 1.4(1m)
    cisco unified computing system infrastructure and unified computing system software 1.4(3i)
    cisco unified computing system infrastructure and unified computing system software 1.4(3l)
    cisco unified computing system infrastructure and unified computing system software 1.4(3m)
    cisco unified computing system infrastructure and unified computing system software 1.4(3q)
    cisco unified computing system infrastructure and unified computing system software 1.4(3s)
    cisco unified computing system infrastructure and unified computing system software 1.4(3u)
    cisco unified computing system infrastructure and unified computing system software 1.4(3y)
    cisco unified computing system infrastructure and unified computing system software 2.0(1q)
    cisco unified computing system infrastructure and unified computing system software 2.0(1s)
    cisco unified computing system infrastructure and unified computing system software 2.0(1t)
    cisco unified computing system infrastructure and unified computing system software 2.0(1w)
    cisco unified computing system infrastructure and unified computing system software 2.0(1x)
    cisco unified computing system 6120xp fabric interconnect -
    cisco unified computing system 6140xp fabric interconnect -
    cisco unified computing system 6248up fabric interconnect -
    cisco unified computing system 6296up fabric interconnect -
    cisco unified computing system integrated management controller -