Vulnerabilities > Cisco > Unified Computing System > 4.2.1f

DATE CVE VULNERABILITY TITLE RISK
2024-10-02 CVE-2024-20365 Command Injection vulnerability in Cisco Unified Computing System
A vulnerability in the Redfish API of Cisco UCS B-Series, Cisco UCS Managed C-Series, and Cisco UCS X-Series Servers could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root. This vulnerability is due to insufficient input validation.
network
low complexity
cisco CWE-77
7.2