Skip to main content

Ucs Director CVE-2020-3240

HIGH
Improper Input Validation (CWE-20)
2020-04-15 psirt@cisco.com
Cisco Path Traversal Ucs Director Ucs Director Express For Big Data
7.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.3 HIGH
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Apr 15, 2020 - 21:15 nvd
HIGH 7.3

DescriptionNVD

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

AnalysisAI

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Affected products include: Cisco Ucs Director, Cisco Ucs Director Express For Big Data.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ucs Director

View all
CVE-2020-3250 CRITICAL POC
9.8 Apr 15

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r
CVE-2020-3243 CRITICAL POC
9.8 Apr 15

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r
CVE-2019-1937 CRITICAL POC
9.8 Aug 21

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco

CVE-2019-1935 CRITICAL POC
9.8 Aug 21

A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director E
CVE-2019-1936 HIGH POC
7.2 Aug 21

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco

CVE-2020-3248 CRITICAL
9.8 Apr 15

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r
CVE-2020-3247 CRITICAL
9.8 Apr 15

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r
CVE-2019-1974 CRITICAL
9.8 Aug 21

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco

CVE-2019-1938 CRITICAL
9.8 Aug 21

A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data

CVE-2014-0709 CRITICAL
9.3 Feb 22

Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easie
CVE-2020-3251 HIGH
8.8 Apr 15

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r
CVE-2020-3239 HIGH
8.8 Apr 15

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a r

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Path Traversal

View all
CVE-2025-64446 CRITICAL POC
9.8
CVE-2015-0016 HIGH POC
7.8
CVE-2016-0752 HIGH POC
7.5
CVE-2024-13159 CRITICAL POC
9.8
CVE-2024-13160 CRITICAL POC
9.8
CVE-2024-13161 CRITICAL POC
9.8
CVE-2014-0780 CRITICAL POC
9.8
CVE-2024-48248 HIGH POC
8.6

Share

CVE-2020-3240 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy