CVE-2013-1185
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x...
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
Exploit likelihood
What each source reports
NVD Score used
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
- Record
CVE-2013-1185- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
- Record
CVE-2013-1185- Updated
- 2026-11-02
EUVDEUVD-2013-1225 No score
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
- Record
EUVD-2013-1225- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wqpx-xh3c-fp6f No score
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x...
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
- Record
GHSA-wqpx-xh3c-fp6f- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
- cisco unified computing system 6120xp fabric interconnect
- cisco unified computing system 6140xp fabric interconnect
- cisco unified computing system 6248up fabric interconnect
- cisco unified computing system 6296up fabric interconnect
- cisco unified computing system infrastructure and unified computing system software
- cisco unified computing system integrated management controller
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1185 is a high vulnerability (CVSS 9.3) in Cisco Unified Computing System 6120xp Fabric Interconnect, published April 25, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.85%, the 79th percentile. No source names a fixed version.