8.8
Élevée
CVE-2026-20200 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…
Description
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unified Computing System (Standalone) | Versions non publiées |
Références
- cisco-sa-cimc-arg-inject-upSHdMfU sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Unified Computing System (Standalone)
Les 23 CVE de Cisco Unified Computing System (Standalone) →
CVE-2026-20293
A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and…
7.1
Élevée
CVE-2026-20288
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker…
6.5
Moyenne
CVE-2026-20198
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an…
4.8
Moyenne
CVE-2026-20090
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…
4.8
Moyenne