CVE-2014-3348 The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) vi...
MediumCVSS 5.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco integrated management controller | <= 2.2.2 | No fix listed |
| cisco unified computing system e140d | All versions | No fix listed |
| cisco unified computing system e140dp | All versions | No fix listed |
| cisco unified computing system e140s m1 | All versions | No fix listed |
| cisco unified computing system e140s m2 | All versions | No fix listed |
| cisco unified computing system e160d | All versions | No fix listed |
| cisco unified computing system e160dp | All versions | No fix listed |
| cisco unified computing system en120s m2 | All versions | No fix listed |
References
- 20140908 Cisco Unified Computing System E-Series Blade Servers Cisco Integrated Management Controller SSH Denial of Service Vulnerability vendor-advisory
- 20140905 Cisco Integrated Management Controller SSH Denial of Service Vulnerability vendor-advisory
- tools.cisco.com vendor-advisory
- 69652 vdb-entry
- 1030813 vdb-entry
- cisco-ucs-cve20143348-dos(95782) vdb-entry