Skip to content
fr Sign in
8.7 High

CVE-2024-20356 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Computing System (Standalone) Versions not published
Cisco Unified Computing System E-Series Software (UCSE) 4.12.1 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 4.11.1 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 3.2 3.2.1 → 3.2.15 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 3.1 3.1.0 → 3.1.5 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 3.0 3.0.1 → 3.0.2 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 2.4 2.4.0 → 2.4.2 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 2.3 2.3.1 → 2.3.5 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 2.2 2.2.1 → 2.2.2 No fix stated
Show the 4 other branches
Product Affected versions Fixed in
Cisco Unified Computing System E-Series Software (UCSE) 2.1.0 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 2.0.0 No fix stated
unified_computing_system Versions not published
unified_computing_system_e-series Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Computing System (Standalone)

The 23 CVEs of Cisco Unified Computing System (Standalone) →
CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and… 7.1 High CVE-2026-20288 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker… 6.5 Medium CVE-2026-20200 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with… 8.8 High CVE-2026-20198 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an… 4.8 Medium
Track this CVE