Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

12 records in Integrated Management Controller · all components

Priority MEDIUM 52

A vulnerability in the web framework code of Cisco Integrated Management Controller (IMC) Supervisor could allow an unauthenticated, remote attacker to execute arbitrary SQL queries.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01731 Published 2018-11-08 No fix listed CWE-89
Priority MEDIUM 42

A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary code and execute arbitrary commands at the underlying operating system level…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01868 Published 2020-11-06 No fix listed CWE-78
Priority LOW 36

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitr…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.0054 Published 2019-06-20 No fix listed CWE-352
Priority LOW 34

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially sensitive system usage information.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02248 Published 2019-06-20 Fixed in 4.0(4b) CWE-306
Priority LOW 33

A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01516 Published 2019-06-20 No fix listed CWE-306
Priority LOW 32

A vulnerability in the CLI of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges.

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.0042 Published 2019-06-20 No fix listed CWE-78
Priority LOW 31

A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to gain unauthorized access to sensitive user information from the configuration data…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01164 Published 2019-06-20 Fixed in 4.0(4b) CWE-78
Priority LOW 29

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00831 Published 2021-05-06 No fix listed CWE-601
Priority LOW 28

The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH pack…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02584 Published 2014-09-10 No fix listed CWE-20
Priority LOW 25

A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) c…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00347 Published 2019-06-20 No fix listed CWE-119
Priority LOW 25

A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition on an affected d…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00385 Published 2019-06-20 Fixed in 4.0(4b) CWE-191
Open these records in search →