CVE:CVE-2018-0362
CNNVD:CNNVD-201806-1115
Cisco 5000 Series Enterprise Network Compute System和UCS E-Series Servers都是美国思科（Cisco）公司的产品。Cisco 5000 Series Enterprise Network Compute System是一套企业网络功能虚拟化解决方案。UCS E-Series Servers是一款数据中心级刀片服务器设备。
Cisco 5000 Series Enterprise Network Compute System和UCS E-Series Servers中的BIOS身份验证管理存在授权问题漏洞，该漏洞源于受影响的系统没有执行正确的安全限制。本地攻击者可通过向受影响设备的BIOS身份验证对话框提交空密码值利用该漏洞访问受限制的BIOS命令。
solution:Upgrade cisco 5400_enterprise_network_compute_system_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco 5100_enterprise_network_compute_system_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e160s-m3_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e160s-k9_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e180d-m3_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e180d-k9_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e1120d-m3_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e1120d-k9_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e140s-m2_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e140s-k9_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e160d-m2_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e160d-k9_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e180d-m2_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e140s-m1_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e160d-m1_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e160dp-m1_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e160dp-k9_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e140d-m1_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e140d-k9_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e140dp-m1_firmware to a higher version than 3.2(3,and avoid the version 3.2(3); Upgrade cisco ucs-e140dp-k9_firmware to a higher version than 3.2(3,and avoid the version 3.2(3)