Is the UCS affected by CVE-2024-20253

[walter19]

Good day,

I read about this vulnerability:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-bWNzQcUm

Is the UCS 5108 Manager running the firmware package 4.2(3e)A affected? If so, whats the firmware version one should upgrade the UCS to?

Unfortunately, the article does not seem to be clear about these questions.

Best Regards

[Riaan van Niekerk · Accepted solution]

The vulnerability affects Cisco Unified Communications, not UCS (Unified Computing Solution) - this is a common point of confusion.

E.g. No, UCS is not affected.