Files
CVEs-PoC/2021/CVE-2021-1592.md
T
2024-05-25 21:48:12 +02:00

18 lines
1.2 KiB
Markdown

### [CVE-2021-1592](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1592)
![](https://img.shields.io/static/v1?label=Product&message=Cisco%20Unified%20Computing%20System%20(Managed)%20&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-664&color=brighgreen)
### Description
A vulnerability in the way Cisco UCS Manager software handles SSH sessions could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper resource management for established SSH sessions. An attacker could exploit this vulnerability by opening a significant number of SSH sessions on an affected device. A successful exploit could allow the attacker to cause a crash and restart of internal Cisco UCS Manager software processes and a temporary loss of access to the Cisco UCS Manager CLI and web UI. Note: The attacker must have valid user credentials to authenticate to the affected device.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/p1ay8y3ar/cve_monitor