Files
CVEs-PoC/2021/CVE-2021-1592.md
2025-09-29 21:09:30 +02:00

18 lines
1.2 KiB
Markdown

### [CVE-2021-1592](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1592)
![](https://img.shields.io/static/v1?label=Product&message=Cisco%20Unified%20Computing%20System%20(Managed)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-664&color=brightgreen)
### Description
A vulnerability in the way Cisco UCS Manager software handles SSH sessions could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper resource management for established SSH sessions. An attacker could exploit this vulnerability by opening a significant number of SSH sessions on an affected device. A successful exploit could allow the attacker to cause a crash and restart of internal Cisco UCS Manager software processes and a temporary loss of access to the Cisco UCS Manager CLI and web UI. Note: The attacker must have valid user credentials to authenticate to the affected device.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/n0-traces/cve_monitor