high
advisory
Cisco Unified Computing System Central Software Remote Code Execution Vulnerability
Cisco addressed a remote code execution vulnerability in Cisco Unified Computing System (UCS) Central Software affecting versions prior to 2.1(2c).
Triage facts
Revision 1- Applicability
- Unified Computing System (UCS) Central Software (< 2.1(2c))
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 2 public sources
- Freshness
- Revision 1Nov 5, 01:30 UTC
- Source quality
- B2Roughly even chance
Cisco has released a security advisory addressing a remote code execution (RCE) vulnerability in Cisco Unified Computing System (UCS) Central Software. The vulnerability affects installations running software versions prior to 2.1(2c). No further technical details or exploit code were provided in the initial security advisory at the time of publication.
Recommendation
- Inventory all instances of Cisco UCS Central Software within the environment.
- Upgrade Cisco UCS Central Software to version 2.1(2c) or later to remediate the identified vulnerability.
- Review the official Cisco security advisory for further updates or configuration workarounds.
Mitigations
Upgrade Cisco UCS Central Software to version 2.1(2c) or later.
immediate
IT Operations
Cisco UCS Central Software RCE vulnerability