CVE-2015-0633

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-26 · updated 2026-06-17
Weakness: CWE-20

Description

The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876.

Affected products

Cisco Unified Computing System (Managed): 1.4, 1.4(1c), 1.4(2), 1.4(3c)1, 1.4(3c)2, 1.4(3j) (+17)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633
http://tools.cisco.com/security/center/viewAlert.x?alertId=37575
http://www.securityfocus.com/bid/72760
http://www.securityfocus.com/bid/85711
http://www.securitytracker.com/id/1031796
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0633
http://tools.cisco.com/security/center/viewAlert.x?alertId=37575
http://www.securityfocus.com/bid/72760
http://www.securityfocus.com/bid/85711
http://www.securitytracker.com/id/1031796

Get alerted when CVE-2015-0633 or the next vulnerability affects your stack