CVE-2015-0633 : The Integrated Management Controller (IMC) in Cisco Unified Computing System (UC

The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.

Published 2015-02-26 01:59:00

Updated 2019-04-15 12:30:08

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2015-0633

Cisco » Unified Computing System » Version: 1.4(3j)
cpe:2.3:a:cisco:unified_computing_system:1.4\(3j\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(3k)
cpe:2.3:a:cisco:unified_computing_system:1.4\(3k\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(5e)
cpe:2.3:a:cisco:unified_computing_system:1.4\(5e\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(5g)
cpe:2.3:a:cisco:unified_computing_system:1.4\(5g\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(5g)2
cpe:2.3:a:cisco:unified_computing_system:1.4\(5g\)2:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(7h)
cpe:2.3:a:cisco:unified_computing_system:1.4\(7h\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(1c)
cpe:2.3:a:cisco:unified_computing_system:1.4\(1c\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(2)
cpe:2.3:a:cisco:unified_computing_system:1.4\(2\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(3s)
cpe:2.3:a:cisco:unified_computing_system:1.4\(3s\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(4a)
cpe:2.3:a:cisco:unified_computing_system:1.4\(4a\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(6c)
cpe:2.3:a:cisco:unified_computing_system:1.4\(6c\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(6d)
cpe:2.3:a:cisco:unified_computing_system:1.4\(6d\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4
cpe:2.3:a:cisco:unified_computing_system:1.4:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(3p)
cpe:2.3:a:cisco:unified_computing_system:1.4\(3p\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(3p)5
cpe:2.3:a:cisco:unified_computing_system:1.4\(3p\)5:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(5h)
cpe:2.3:a:cisco:unified_computing_system:1.4\(5h\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(5j)
cpe:2.3:a:cisco:unified_computing_system:1.4\(5j\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(3c)2
cpe:2.3:a:cisco:unified_computing_system:1.4\(3c\)2:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(3c)1
cpe:2.3:a:cisco:unified_computing_system:1.4\(3c\)1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(4a)1
cpe:2.3:a:cisco:unified_computing_system:1.4\(4a\)1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(5b)1
cpe:2.3:a:cisco:unified_computing_system:1.4\(5b\)1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(7b)1
cpe:2.3:a:cisco:unified_computing_system:1.4\(7b\)1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4
Cisco » Unified Computing System » Version: 1.4(7c)1
cpe:2.3:a:cisco:unified_computing_system:1.4\(7c\)1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » C200 M1
When used together with: Cisco » C200 M2
When used together with: Cisco » C210 M2
When used together with: Cisco » C22 M3
When used together with: Cisco » C220 M3
When used together with: Cisco » C220 M4
When used together with: Cisco » C24 M3
When used together with: Cisco » C240 M3
When used together with: Cisco » C240 M4
When used together with: Cisco » C250 M1
When used together with: Cisco » C250 M2
When used together with: Cisco » C260 M2
When used together with: Cisco » C3160
When used together with: Cisco » C420 M2
When used together with: Cisco » C420 M3
When used together with: Cisco » C460 M1
When used together with: Cisco » C460 M2
When used together with: Cisco » C460 M4

Exploit prediction scoring system (EPSS) score for CVE-2015-0633

EPSS FAQ

0.83%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 80 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-0633

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:A/AC:L/Au:N/C:N/I:P/A:C	6.5	7.8	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: Complete

CWE ids for CVE-2015-0633

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-0633

http://www.securitytracker.com/id/1031796

Cisco Unified Computing System DHCP Bug in Integrated Management Controller Lets Remote Users Access Controls on the Target System - SecurityTracker
http://www.securityfocus.com/bid/72760

Cisco Unified Computing System C-Series DHCP Packet Handling Denial of Service Vulnerability
http://tools.cisco.com/security/center/viewAlert.x?alertId=37575

Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability
Vendor Advisory
http://www.securityfocus.com/bid/85711

Cisco Unified Computing System CVE-2015-6415 Denial of Service Vulnerability

CVEs referencing this url
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633

Cisco UCS C-Series Integrated Management Controller Denial of Service Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2015-0633

Products affected by CVE-2015-0633

Exploit prediction scoring system (EPSS) score for CVE-2015-0633

CVSS scores for CVE-2015-0633

CWE ids for CVE-2015-0633

References for CVE-2015-0633