CVE-2014-3348

Medium

Description

The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.

SeverityMedium
CVSS5.0
Exploit probability—
ProductCisco Integrated Management Controller
PublishedSep 10, 2014
First seenSep 10, 2014

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
cisco integrated_management_controllerv ≤ 2.2.2—
cisco unified_computing_system_e140dNo range specified—
cisco unified_computing_system_e140dpNo range specified—
cisco unified_computing_system_e140s_m1No range specified—
cisco unified_computing_system_e140s_m2No range specified—
cisco unified_computing_system_e160dNo range specified—
cisco unified_computing_system_e160dpNo range specified—
cisco unified_computing_system_en120s_m2No range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2014-3348 · Cisco Integrated Management Controller · Dark Radar