CVE-2020-3243: critical vulnerability in Cisco UCS Director
Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data
Published · Updated
85Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 9.8epss 88%
from disclosure to weapon0 days
Published on NVDApr 15
metasploitApr 15
exploitation probability
88%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Cisco · Cisco UCS Directorpublic PoCs found — 1
cve_referencepacketstormsecurity.com/files/157955/Cisco-UCS-Director-Cloupia-Script-Remote-Code-Execution.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Cisco UCS Director
In the same product, most dangerous first.
CVE-2020-3247CRITICALMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataEPSS 75.6%CVE-2020-3248CRITICALMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataEPSS 74.4%CVE-2020-3239CRITICALMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataEPSS 73.6%CVE-2020-3251CRITICALMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataEPSS 61.5%CVE-2020-3250CRITICALMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataEPSS 60.9%CVE-2020-3240CRITICALMultiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataEPSS 38.7%