Vulnerabilities > Cisco > UCS Central Software

DATE CVE VULNERABILITY TITLE RISK
2023-02-23 CVE-2023-20012 Improper Authentication vulnerability in Cisco products
A vulnerability in the CLI console login authentication of Cisco Nexus 9300-FX3 Series Fabric Extender (FEX) when used in UCS Fabric Interconnect deployments could allow an unauthenticated attacker with physical access to bypass authentication.
low complexity
cisco CWE-287
4.6
4.6
2023-02-23 CVE-2023-20015 OS Command Injection vulnerability in Cisco products
A vulnerability in the CLI of Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances, and Cisco UCS 6200, 6300, 6400, and 6500 Series Fabric Interconnects could allow an authenticated, local attacker to inject unauthorized commands.
local
low complexity
cisco CWE-78
6.7
6.7
2023-02-23 CVE-2023-20016 Use of Insufficiently Random Values vulnerability in Cisco products
A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup files.
local
low complexity
cisco CWE-330
6.5
6.5
2021-12-10 CVE-2021-44228 Deserialization of Untrusted Data vulnerability in multiple products
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. 		10.0
10