CVE-2013-1185
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x...
CVE-2013-1185 is a high vulnerability (CVSS 9.3) in Cisco Unified Computing System 6120xp Fabric Interconnect, published April 25, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.85%, the 79th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 1.85%EPSS, 79th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
Exploit likelihood
Affected products
- cisco unified computing system 6120xp fabric interconnect
- cisco unified computing system 6140xp fabric interconnect
- cisco unified computing system 6248up fabric interconnect
- cisco unified computing system 6296up fabric interconnect
- cisco unified computing system infrastructure and unified computing system software
- cisco unified computing system integrated management controller
What each source reports
NVD Score used
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
- Record
CVE-2013-1185- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
- Record
CVE-2013-1185- Updated
- 2026-11-02
EUVDEUVD-2013-1225No score
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
- Record
EUVD-2013-1225- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wqpx-xh3c-fp6fNo score
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x...
The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543.
- Record
GHSA-wqpx-xh3c-fp6f- Weakness
- CWE-200
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.