CVE-2013-1185

CVE Database · CVE-2013-1185

CVE-2013-1185

· N/AModified

CVSS v3.1

N/A

EPSS

1.85%

Published

Apr 25, 2013

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.

Weaknesses (CWE)

CWE-200

Affected Products (41)

cisco · unified_computing_system_infrastructure_and_unified_computing_system_softwarevulnerable

cisco · unified_computing_system_infrastructure_and_unified_computing_system_software

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs

cisco · unified_computing_system_infrastructure_and_unified_computing_system_softwarevulnerable

cisco · unified_computing_system_infrastructure_and_unified_computing_system_software

cisco · unified_computing_system_6120xp_fabric_interconnectvulnerable

cisco · unified_computing_system_6140xp_fabric_interconnectvulnerable

cisco · unified_computing_system_6248up_fabric_interconnectvulnerable

cisco · unified_computing_system_6296up_fabric_interconnectvulnerable

cisco · unified_computing_system_integrated_management_controllervulnerable