Priority MEDIUM 57
Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04798 · Published 2020-11-18 · No fix listed CWE-119
Priority MEDIUM 52
A vulnerability in the web framework code of Cisco Integrated Management Controller (IMC) Supervisor could allow an unauthenticated, remote attacker to execute arbitrary SQL queries.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01731 · Published 2018-11-08 · No fix listed CWE-89
Priority MEDIUM 42
A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary code and execute arbitrary commands at the underlying operating system level…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01868 · Published 2020-11-06 · No fix listed CWE-78
Priority LOW 36
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitr…
CVSS 3.0HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.0054 · Published 2019-06-20 · No fix listed CWE-352
Priority LOW 34
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially sensitive system usage information.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02248 · Published 2019-06-20 · Fixed in 4.0(4b) CWE-306
Priority LOW 33
A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01516 · Published 2019-06-20 · No fix listed CWE-306
Priority LOW 32
A vulnerability in the CLI of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.0042 · Published 2019-06-20 · No fix listed CWE-78
Priority LOW 31
A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to gain unauthorized access to sensitive user information from the configuration data…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01164 · Published 2019-06-20 · Fixed in 4.0(4b) CWE-78
Priority LOW 29
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00831 · Published 2021-05-06 · No fix listed CWE-601
Priority LOW 28
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH pack…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02584 · Published 2014-09-10 · No fix listed CWE-20
Priority LOW 25
A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) c…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00347 · Published 2019-06-20 · No fix listed CWE-119
Priority LOW 25
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition on an affected d…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00385 · Published 2019-06-20 · Fixed in 4.0(4b) CWE-191