Aller au contenu
en Se connecter
8.8 Élevée

CVE-2026-20094 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…

Description

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Unified Computing System (Standalone) Versions non publiées
Cisco Unified Computing System E-Series Software (UCSE) 4.15.2 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 4.12 4.12.1 → 4.12.2 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 4.11.1 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 4.02 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 4.00 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 3.2 3.2.1 → 3.2.16.1 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 3.1 3.1.0 → 3.1.5 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 3.0 3.0.1 → 3.0.2 Pas de correctif indiqué
Afficher les 5 autres branches
Produit Versions touchées Corrigé en
Cisco Unified Computing System E-Series Software (UCSE) 2.4 2.4.0 → 2.4.2 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 2.3 2.3.1 → 2.3.5 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 2.2 2.2.1 → 2.2.2 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 2.1.0 Pas de correctif indiqué
Cisco Unified Computing System E-Series Software (UCSE) 2.0.0 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco Unified Computing System (Standalone)

Les 23 CVE de Cisco Unified Computing System (Standalone) →
CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and… 7.1 Élevée CVE-2026-20288 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker… 6.5 Moyenne CVE-2026-20200 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with… 8.8 Élevée CVE-2026-20198 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an… 4.8 Moyenne
Suivre cette CVE