Cisco Unified Computing System (UCS) C240 M5 -
Approved changes feed: RSS · Atom
cpe:2.3:h:cisco:unified_computing_system_c240_m5:-:*:*:*:*:*:*:*part: h version: - update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Unified Computing System C240 M5 (a7b829ff-c281-558a-bf8a-2c9be893de32) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1880 |
not_vulnerable | 2026-06-08 05:13:29.881690 |
Cisco Unified Computing System BIOS Signature Bypass Vulnerability
MEDIUM (4.4)
A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System (UCS) C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An attacker could exploit this vulnerability by executing the BIOS upgrade utility with a specific set of options. A successful exploit could allow the attacker to bypass the firmware signature-verification process and install compromised BIOS firmware on an affected device.
Published: 2019-06-05T16:30:23.473Z
Updated: 2024-11-21T19:22:52.735Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.