Cisco Unified Computing System Platform Emulator Command Injection Vulnerability (cisco-sa-20160414-ucspe1)——漏洞银行丨0DAY BANK

A vulnerability in the Cisco Unified Computing System (UCS) Platform Emulator could allow an authenticated, local attacker to perform a command injection attack.
The vulnerability occurs because the affected system improperly handles ucspe-copy command-line arguments.

An attacker could exploit this vulnerability by using crafted command arguments on the system. An exploit could allow the attacker to perform a command injection attack, which could allow the attacker to execute arbitrary commands on the system.

Refer to Cisco Advisory cisco-sa-20160414-ucspe1 for more information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

cisco-sa-20160414-ucspe1: Cisco UCS Platform Emulator