8.8
Élevée
CVE-2024-20295 A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local…
Description
A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or higher privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unified Computing System (Standalone) | Versions non publiées | |
| Cisco Unified Computing System E-Series Software (UCSE) | Versions non publiées | |
| unified_computing_system 2 | 2 → 4.3 | Pas de correctif indiqué |
Références
- cisco-sa-cimc-cmd-inj-mUx4c5AJ sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Unified Computing System (Standalone)
Les 23 CVE de Cisco Unified Computing System (Standalone) →
CVE-2026-20293
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and…
7.1
Élevée
CVE-2026-20288
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker…
6.5
Moyenne
CVE-2026-20200
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…
8.8
Élevée
CVE-2026-20198
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…
4.8
Moyenne