Detections
Analytics
Cisco UCS Fabric Interconnects Command Injection (cisco-sa-ucs-multi-cmdinj-E4Ukjyrz)
medium Nessus Plugin ID 258111
Synopsis
The remote device is missing a vendor-supplied security patchDescription
According to its self-reported version, Cisco Unified Computing System (UCS) Fabric Interconnect is affected by multiple vulnerabilities.- Vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root. This vulnerability is due to insufficient input validation of command arguments supplied by the user. An attacker could exploit these vulnerabilities by authenticating to a device and submitting crafted input to the affected commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of the affected device with root-level privileges. (CVE-2025-20294)
- A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files. This vulnerability is due to insufficient input validation of command arguments supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to read or create a file or overwrite any file on the file system of the underlying operating system of the affected device, including system files. To exploit this vulnerability, the attacker must have valid administrative credentials on the affected device.
Please see the included Cisco BIDs and Cisco Security Advisory for more information.
Solution
Upgrade to the relevant fixed version referenced in Cisco bug IDs CSCwm88176 and CSCwn06825See Also
Plugin Details
Severity: Medium
ID: 258111
File Name: cisco-sa-ucs-multi-cmdinj-E4Ukjyrz.nasl
Version: 1.1
Type: remote
Family: CISCO
Published: 8/29/2025
Updated: 8/29/2025
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.7
CVSS v2
Risk Factor: High
Base Score: 7.7
Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:N
CVSS Score Source: CVE-2025-20294
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Vulnerability Information
CPE: cpe:/a:cisco:unified_computing_system
Required KB Items: installed_sw/cisco_ucs_manager
Patch Publication Date: 2/22/2023
Vulnerability Publication Date: 2/22/2023
Reference Information
CVE: CVE-2025-20294, CVE-2025-20295