CVE-2018-0113

A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting a crafted request to the user interface of Cisco UCS Central. This vulnerability affects Cisco UCS Central Software prior to Release 2.0(1c). Cisco Bug IDs: CSCve70825.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/102966Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040337Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-ucscVendor Advisory
• http://www.securityfocus.com/bid/102966Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040337Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-ucscVendor Advisory

Published

Feb 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0107A vulnerability in the web framework of Cisco Prime Service …
• CVE-2018-0108A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0109A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0110A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0111A vulnerability in Cisco WebEx Meetings Server could allow a…
• CVE-2018-0112A vulnerability in Cisco WebEx Business Suite clients, Cisco…
• CVE-2018-0114A vulnerability in the Cisco node-jose open source library b…7.5
• CVE-2018-0115A vulnerability in the CLI of the Cisco StarOS operating sys…
• CVE-2018-0116A vulnerability in the RADIUS authentication module of Cisco…
• CVE-2018-0117A vulnerability in the ingress packet processing functionali…
• CVE-2018-0118A vulnerability in the web-based management interface of Cis…
• CVE-2018-0119A vulnerability in certain authentication controls in the ac…