CVE-2020-3470

🗓️ 18 Nov 2020 17:41:18Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 66 Views

Cisco IMC API subsystem vulnerabilities allow remote code execution with root privilege

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2020-3470	18 Nov 202022:40	–	circl
Cisco	Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities	18 Nov 202016:00	–	cisco
Tenable Nessus	Cisco Integrated Management Controller RCE (cisco-sa-ucs-api-rce-UXwpeDHd)	20 Nov 202000:00	–	nessus
CNNVD	Cisco Integrated Management Controller 输入验证错误漏洞	18 Nov 202000:00	–	cnnvd
CNVD	Cisco Integrated Management Controller Remote Code Execution Vulnerability	19 Nov 202000:00	–	cnvd
Cvelist	CVE-2020-3470 Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities	18 Nov 202017:41	–	cvelist
EUVD	EUVD-2020-24741	7 Oct 202500:30	–	euvd
NVD	CVE-2020-3470	18 Nov 202019:15	–	nvd
Prion	Buffer overflow	18 Nov 202019:15	–	prion
Positive Technologies	PT-2020-30: Multiple code execution in Cisco Integrated Management Controller (CIMC)	11 Apr 202000:00	–	ptsecurity

NVD

Node

cisco enterprise_nfv_infrastructure_softwareRange<4.4.1

AND

cisco enterprise_network_compute_system_5100Match-

cisco enterprise_network_compute_system_5400Match-

Node

cisco integrated_management_controllerRange4.0(1a)–4.0(4l)

AND

cisco c125_m5Match-

cisco c220_m5Match-

cisco c240_m5Match-

cisco c480_m5Match-

cisco c480_ml_m5Match-

Node

cisco integrated_management_controllerRange3.0(1c)–3.0(4q)

cisco integrated_management_controllerRange4.0(1a)–4.0(2l)

cisco integrated_management_controllerRange4.1(1c)–4.1(1f)

AND

cisco ucs_c220_m4Match-

cisco ucs_c460_m4Match-

Node

cisco integrated_management_controllerRange3.0(1c)–3.0(4q)

AND

cisco ucs_c22_m3Match-

cisco ucs_c220_m3Match-

cisco ucs_c24_m3Match-

cisco ucs_c240_m3Match-

cisco ucs_c420_m3Match-

Node

cisco integrated_management_controllerRange<3.2.11.3

AND

cisco ucs_e-series_m1Match-

cisco ucs_e-series_m2Match-

cisco ucs_e-series_m3Match-

Node

cisco integrated_management_controllerRange3.1–4.0(4l)

cisco integrated_management_controllerRange4.1(1c)–4.1(1f)

AND

cisco ucs_s3260Match-

Node

cisco integrated_management_controllerRange3.0(1c)–3.0(4q)

AND

cisco ucs_s3160Match-

[
  {
    "product": "Cisco Unified Computing System (Standalone)",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-api-rce-UXwpeDHd

21 Nov 2024 05:31Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

CVSS 210

EPSS0.03203

SSVC