Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The fabric-interconnect KVM module in Cisco Unified Computing System (UCS) does not encrypt video data, which allows man-in-the-middle attackers to watch KVM display content by sniffing the network or modify this traffic by inserting packets into the client-server data stream, aka Bug ID CSCtr72949.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco UCS Fabric Interconnect KVM模块命令注入漏洞
Vulnerability Description
Cisco Unified Computing System（UCS）是美国思科（Cisco）公司的一套统一计算系统。该系统通过大量采用虚拟化技术将网络、计算和虚拟化资源集成到一个平台上。 Cisco UCS中的Fabric Interconnect KVM模块中存在命令注入漏洞，该漏洞源于KVM发送的视频数据没有加密。远程攻击者可利用该漏洞实施中间人攻击，可通过嗅探网络流量或修改流量查看KVM显示的内容。
CVSS Information
N/A
Vulnerability Type
N/A