CVE-2013-1186
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote...
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746.
Exploit likelihood
What each source reports
NVD Score used
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746.
- Record
CVE-2013-1186- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746.
- Record
CVE-2013-1186- Updated
- 2026-11-02
EUVDEUVD-2013-1226 No score
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746.
- Record
EUVD-2013-1226- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q49f-6wf5-8q6h No score
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote...
Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746.
- Record
GHSA-q49f-6wf5-8q6h- Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
- cisco unified computing system 6120xp fabric interconnect
- cisco unified computing system 6140xp fabric interconnect
- cisco unified computing system 6248up fabric interconnect
- cisco unified computing system 6296up fabric interconnect
- cisco unified computing system infrastructure and unified computing system software
- cisco unified computing system integrated management controller
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-1186 is a high vulnerability (CVSS 7.5) in Cisco Unified Computing System 6120xp Fabric Interconnect, published April 25, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.11%, the 81st percentile. No source names a fixed version.