8.7
Élevée
CVE-2024-20356 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…
Description
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unified Computing System (Standalone) | Versions non publiées | |
| Cisco Unified Computing System E-Series Software (UCSE) | 4.12.1 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 4.11.1 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 3.2 | 3.2.1 → 3.2.15 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 3.1 | 3.1.0 → 3.1.5 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 3.0 | 3.0.1 → 3.0.2 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 2.4 | 2.4.0 → 2.4.2 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 2.3 | 2.3.1 → 2.3.5 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 2.2 | 2.2.1 → 2.2.2 | Pas de correctif indiqué |
Afficher les 4 autres branches Masquer les 4 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unified Computing System E-Series Software (UCSE) | 2.1.0 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 2.0.0 | Pas de correctif indiqué |
| unified_computing_system | Versions non publiées | |
| unified_computing_system_e-series | Versions non publiées |
Références
- cisco-sa-cimc-cmd-inj-bLuPcb sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Unified Computing System (Standalone)
Les 23 CVE de Cisco Unified Computing System (Standalone) →
CVE-2026-20293
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and…
7.1
Élevée
CVE-2026-20288
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker…
6.5
Moyenne
CVE-2026-20200
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…
8.8
Élevée
CVE-2026-20198
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…
4.8
Moyenne