The Integrated Management Controller on Cisco Unified Computing System (UCS) C servers with software 1.5(3) and 1.6(0.16) has a default SSL certificate, which makes it easier for man-in-the-middle attackers to bypass cryptographic protection mechanisms by leveraging knowledge of a private key, aka Bug IDs CSCum56133 and CSCum56177.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Cisco Ucs | — | Upgrade to Cisco UCS Device version 2.0(9c) | Apr 25, 2018 | Jul 10, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub