Cisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows…
Priority LOW 23CWE-399Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.
Summary
Cisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of service (host OS or BMC hang) by sending crafted packets over the Inter-IC (I2C) bus, aka Bug ID CSCuq77241.
Why it matters now
EPSS 0.00415 36th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 19
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1b\):*:*:*:*:*:*:* | 2.2(1b) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1c\):*:*:*:*:*:*:* | 2.2(1c) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1d\):*:*:*:*:*:*:* | 2.2(1d) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1e\):*:*:*:*:*:*:* | 2.2(1e) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1f\):*:*:*:*:*:*:* | 2.2(1f) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1g\):*:*:*:*:*:*:* | 2.2(1g) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1h\):*:*:*:*:*:*:* | 2.2(1h) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(2c\):*:*:*:*:*:*:* | 2.2(2c) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(2d\):*:*:*:*:*:*:* | 2.2(2d) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(2e\):*:*:*:*:*:*:* | 2.2(2e) | Vulnerable | Cisco |
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1b\):*:*:*:*:*:*:* Versions 2.2(1b) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1c\):*:*:*:*:*:*:* Versions 2.2(1c) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1d\):*:*:*:*:*:*:* Versions 2.2(1d) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1e\):*:*:*:*:*:*:* Versions 2.2(1e) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1f\):*:*:*:*:*:*:* Versions 2.2(1f) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1g\):*:*:*:*:*:*:* Versions 2.2(1g) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(1h\):*:*:*:*:*:*:* Versions 2.2(1h) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(2c\):*:*:*:*:*:*:* Versions 2.2(2c) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(2d\):*:*:*:*:*:*:* Versions 2.2(2d) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(2e\):*:*:*:*:*:*:* Versions 2.2(2e) Vulnerable ·Cisco
Show 9 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3a\):*:*:*:*:*:*:* | 2.2(3a) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3b\):*:*:*:*:*:*:* | 2.2(3b) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3c\):*:*:*:*:*:*:* | 2.2(3c) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3d\):*:*:*:*:*:*:* | 2.2(3d) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3e\):*:*:*:*:*:*:* | 2.2(3e) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3f\):*:*:*:*:*:*:* | 2.2(3f) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3g\):*:*:*:*:*:*:* | 2.2(3g) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(4b\):*:*:*:*:*:*:* | 2.2(4b) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(5a\):*:*:*:*:*:*:* | 2.2(5a) | Vulnerable | Cisco |
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3a\):*:*:*:*:*:*:* Versions 2.2(3a) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3b\):*:*:*:*:*:*:* Versions 2.2(3b) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3c\):*:*:*:*:*:*:* Versions 2.2(3c) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3d\):*:*:*:*:*:*:* Versions 2.2(3d) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3e\):*:*:*:*:*:*:* Versions 2.2(3e) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3f\):*:*:*:*:*:*:* Versions 2.2(3f) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(3g\):*:*:*:*:*:*:* Versions 2.2(3g) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(4b\):*:*:*:*:*:*:* Versions 2.2(4b) Vulnerable ·Cisco
- cpe:2.3:a:cisco:ucs_b-series_blade_server_software:2.2\(5a\):*:*:*:*:*:*:* Versions 2.2(5a) Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2015-4265
- 2026-10-03 Alias added: GHSA-g69f-xx4p-mhgx
References
Sources
- CVE-2015-4265 · CVE Program
- CVE-2015-4265 · NVD
- FIRST EPSS
- GHSA-g69f-xx4p-mhgx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences