Exploit for #VU26985 Improper Authentication in Cisco UCS Director and Cisco UCS Director Express for Big Data

Vulnerability identifier: #VU26985

Vulnerability risk: High

CVSSv4.0: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber]

CVE-ID: CVE-2020-3243

CWE-ID: CWE-287

Exploitation vector: Network

Exploits in database: 3

• October 27, 2020
  • Cisco UCS Director Cloupia Script Interpreter Remote Code Execution Vulnerability [Source Incite]
  • Cisco UCS Director CopyFileRunnable run Arbitrary Symlink Remote Code Execution Vulnerability [Source Incite]
• June 19, 2020
  • Cisco UCS Director Cloupia Script RCE [Metasploit]

Vulnerable software:
Cisco UCS Director
Server applications / Other server solutions
Cisco UCS Director Express for Big Data
Server applications / Other server solutions

Vendor: Cisco Systems, Inc