{"schemaVersion":3,"id":"CVE-2024-20280","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability in the backup feature of Cisco UCS Central Software could allow an attacker with access to a backup file to learn sensitive information that is stored in the full state and configuration backup files.\n\nThis vulnerability is due to a weakness in the encryption method that is used for the backup function. An attacker could exploit this vulnerability by accessing a backup file and leveraging a static key that is used for the backup configuration feature. A successful exploit could allow an attacker with access to a backup file to learn sensitive information that is stored in full state backup files and configuration backup files, such as local user credentials, authentication server passwords, Simple Network Management Protocol (SNMP) community names, and the device SSL server certificate and key.","dates":{"published":"2024-10-16T16:15:37.008Z","modified":"2024-10-31T14:13:19.791Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.3,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.3,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00111,"percentile":0.01272,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00111},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00111,"percentile":0.01272}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00111,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00111,"percentile":0.01272}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-321","name":"Use of Hard-coded Cryptographic Key","description":"The product uses a hard-coded, unchangeable cryptographic key.","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/321.html"},{"id":"CWE-798","name":"Use of Hard-coded Credentials","description":"The product contains hard-coded credentials, such as a password or cryptographic key.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/798.html"}],"affected":[{"vendor":"cisco","product":"cisco unified computing system central software","name":"Cisco Unified Computing System Central Software","label":"cisco unified computing system central software","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.0(1e)","noFixRecorded":false,"fixedIn":null},{"text":"1.1(1b)","noFixRecorded":false,"fixedIn":null},{"text":"1.4(1b)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1a)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1h)","noFixRecorded":false,"fixedIn":null},{"text":"1.3(1a)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1g)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1c)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1k)","noFixRecorded":false,"fixedIn":null},{"text":"1.0(1a)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1l)","noFixRecorded":false,"fixedIn":null},{"text":"1.2(1f)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1f)","noFixRecorded":false,"fixedIn":null},{"text":"1.4(1c)","noFixRecorded":false,"fixedIn":null},{"text":"1.3(1c)","noFixRecorded":false,"fixedIn":null},{"text":"1.1(1a)","noFixRecorded":false,"fixedIn":null},{"text":"1.4(1a)","noFixRecorded":false,"fixedIn":null},{"text":"1.2(1a)","noFixRecorded":false,"fixedIn":null},{"text":"1.2(1d)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1j)","noFixRecorded":false,"fixedIn":null},{"text":"1.5(1c)","noFixRecorded":false,"fixedIn":null},{"text":"1.5(1a)","noFixRecorded":false,"fixedIn":null},{"text":"1.1(2a)","noFixRecorded":false,"fixedIn":null},{"text":"1.3(1b)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1b)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1i)","noFixRecorded":false,"fixedIn":null},{"text":"1.2(1e)","noFixRecorded":false,"fixedIn":null},{"text":"1.5(1b)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1d)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1m)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1n)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1o)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1p)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1q)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1r)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1s)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1t)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1u)","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.0(1e) | 1.1(1b) | 1.4(1b) | 2.0(1a) | 2.0(1h) | 1.3(1a) | 2.0(1g) | 2.0(1c) | 2.0(1k) | 1.0(1a) | 2.0(1l) | 1.2(1f) | 2.0(1f) | 1.4(1c) | 1.3(1c) | 1.1(1a) | 1.4(1a) | 1.2(1a) | 1.2(1d) | 2.0(1j) | 1.5(1c) | 1.5(1a) | 1.1(2a) | 1.3(1b) | 2.0(1b) | 2.0(1i) | 1.2(1e) | 1.5(1b) | 2.0(1d) | 2.0(1m) | 2.0(1n) | 2.0(1o) | 2.0(1p) | 2.0(1q) | 2.0(1r) | 2.0(1s) | 2.0(1t) | 2.0(1u)","eol":null,"hubHref":"/vendor/cisco/cisco_unified_computing_system_central_software"},{"vendor":"cisco","product":"ucs_central_software","name":"ucs central software","label":"ucs_central_software","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0\\(1a\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.1\\(1a\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.1\\(1b\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.1\\(2a\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.2\\(1a\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.2\\(1d\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.2\\(1e\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.2\\(1f\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.3\\(1a\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.3\\(1b\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.3\\(1c\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.4\\(1a\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.4\\(1b\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.4\\(1c\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.5\\(1a\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.5\\(1b\\)","noFixRecorded":false,"fixedIn":null},{"text":"1.5\\(1c\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1a\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1b\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1c\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1d\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1e\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1f\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1g\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1h\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1i\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1j\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1k\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1l\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1m\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1n\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1o\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1p\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1q\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1r\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1s\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1t\\)","noFixRecorded":false,"fixedIn":null},{"text":"2.0\\(1u\\)","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0\\(1a\\) | 1.1\\(1a\\) | 1.1\\(1b\\) | 1.1\\(2a\\) | 1.2\\(1a\\) | 1.2\\(1d\\) | 1.2\\(1e\\) | 1.2\\(1f\\) | 1.3\\(1a\\) | 1.3\\(1b\\) | 1.3\\(1c\\) | 1.4\\(1a\\) | 1.4\\(1b\\) | 1.4\\(1c\\) | 1.5\\(1a\\) | 1.5\\(1b\\) | 1.5\\(1c\\) | 2.0\\(1a\\) | 2.0\\(1b\\) | 2.0\\(1c\\) | 2.0\\(1d\\) | 2.0\\(1e\\) | 2.0\\(1f\\) | 2.0\\(1g\\) | 2.0\\(1h\\) | 2.0\\(1i\\) | 2.0\\(1j\\) | 2.0\\(1k\\) | 2.0\\(1l\\) | 2.0\\(1m\\) | 2.0\\(1n\\) | 2.0\\(1o\\) | 2.0\\(1p\\) | 2.0\\(1q\\) | 2.0\\(1r\\) | 2.0\\(1s\\) | 2.0\\(1t\\) | 2.0\\(1u\\)","eol":null,"hubHref":"/vendor/cisco/ucs_central_software"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsc-bkpsky-TgJ5f73J","label":"sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsc-bkpsky-TgJ5f73J","hostname":"sec.cloudapps.cisco.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-10-16T16:15:37.008Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-10-31T14:13:19.791Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":25,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T02:35:32.281Z","stale":false,"partial":false}}