Vulnerabilities > Cisco > Unified Computing System Central Software > High

DATE CVE VULNERABILITY TITLE RISK
2018-02-08 CVE-2018-0113 Improper Input Validation vulnerability in Cisco Unified Computing System Central Software 1.5(1C)
A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user.
network
low complexity
cisco CWE-20
8.8
2018-01-18 CVE-2018-0094 Resource Exhaustion vulnerability in Cisco Unified Computing System Central Software 1.4(1A)
A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device.
network
low complexity
cisco CWE-400
7.5