CVE:CVE-2013-1186
CNNVD:CNNVD-201304-526
Cisco Unified Computing System（UCS）是美国思科（Cisco）公司的一套统一计算系统。该系统通过大量采用虚拟化技术将网络、计算和虚拟化资源集成到一个平台上。
Cisco Unified Computing System (UCS) 1.4(4)之前的1.x版本，2.0(2m)之前的2.x版本中存在漏洞。远程攻击者可通过发送特制的身份认证请求到Cisco Integrated Management Controller (IMC)利用该漏洞绕过KVM身份认证。
solution:Upgrade cisco unified_computing_system_infrastructure_and_unified_computing_system_software to a higher version than 1.0,1.0(2k,1.1,1.1(1m,1.2,1.2(1,1.2(1a,1.2(1d,1.3(1c,1.3(1m,1.3(1n,1.3(1o,1.3(1p,1.3(1q,1.3(1t,1.3(1w,1.3(1y,1.4(1j,1.4(1m,1.4(3i,1.4(3l,1.4(3m,1.4(3q,1.4(3s,1.4(3u,1.4(3y,2.0(1q,2.0(1s,2.0(1t,2.0(1w,2.0(1x,and avoid the version 1.0,1.0(2k),1.1,1.1(1m),1.2,1.2(1),1.2(1a),1.2(1d),1.3(1c),1.3(1m),1.3(1n),1.3(1o),1.3(1p),1.3(1q),1.3(1t),1.3(1w),1.3(1y),1.4(1j),1.4(1m),1.4(3i),1.4(3l),1.4(3m),1.4(3q),1.4(3s),1.4(3u),1.4(3y),2.0(1q),2.0(1s),2.0(1t),2.0(1w),2.0(1x); Upgrade cisco unified_computing_system_6120xp_fabric_interconnect to a higher version than -; Upgrade cisco unified_computing_system_6140xp_fabric_interconnect to a higher version than -; Upgrade cisco unified_computing_system_6248up_fabric_interconnect to a higher version than -; Upgrade cisco unified_computing_system_6296up_fabric_interconnect to a higher version than -; Upgrade cisco unified_computing_system_integrated_management_controller to a higher version than -