What it is about

Bei dem Cisco Unified Computing System (UCS) handelt es sich um eine Rechenzentrumsplattform, die Rechenleistung, Netzwerk, Storage-Zugriff und Virtualisierung in einem System zusammenführt. Ein entfernter, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Cisco Unified Computing System (UCS) ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, erweiterte Berechtigungen zu erlangen und Daten zu ändern.

Under what conditions?

Over the network, but only with valid access (login required), for example with stolen credentials or as an insider.

What can happen in the worst case

An attacker could use the vulnerability to

• beliebigen Programmcode mit Administratorrechten auszuführen
• erweiterte Berechtigungen zu erlangen
• Daten zu ändern

Am I affected?

Affected according to the BSI:

• Cisco Unified Computing System (UCS) SW <4.3(6f)
• Cisco Unified Computing System (UCS) SW <6.0(2)
• Cisco Unified Computing System (UCS) 6300 Series Fabric Interconnects
• Cisco Unified Computing System (UCS) 6400 Series Fabric Interconnects
• Cisco Unified Computing System (UCS) 6500 Series Fabric Interconnects
• Cisco Unified Computing System (UCS) 6600 Series Fabric Interconnects
• Cisco Unified Computing System (UCS) X-Series Direct Fabric Interconnects 9108 100G

The installed version is usually shown under “Help → About” or in the device’s admin interface.

What helps?

Update to at least:

• Cisco Unified Computing System (UCS) SW 4.3(6f)
• Cisco Unified Computing System (UCS) SW 6.0(2)

Is the vulnerability already being exploited?

None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.