by Kastro
Paper/Archive/CVE-2020-3252

CVE-2020-3252

Cisco Cisco UCS Director — Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

EPSS 5%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 92.6.926 × 2018.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected

ProductAffectedFixed inSource
Cisco UCS Directorn/a–CNA

Scores by source

cisco (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorytools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsd-mult-vulns-UNfpdW4E