CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC with RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

CVE-2026-125073

A flaw was found in FFmpeg. A CPU exhaustion issue can occur in the IMC and IAC audio decoders when decoding specially crafted audio files due to a failure to handle negative bit budgets. This vulnerability can lead to an excessive consumption of CPU resources, eventually resulting in a denial of...

CVE-2017-12561

CVE-2017-12561 - HPE iMC dbman Use-After-Free Technical analysis of CVE-2017-12561, a use-after-free vulnerability in the dbman service of Hewlett Packard Enterprise Intelligent Management Center iMC. Overview The vulnerability affects the service's handling of opcode 10012. Incorrect object...

HPE-iMC-7.3-RMI-Java-Deserialization

HPE iMC 7.3 Java RMI Registry Deserialization RCE Vulnerability CVE ID CVE-2017-5792 Exploit Vendor Homepage: www.hpe.com Version: iMC PLAT v7.3 E0504 Standard Tested on: Windows Server 2008 R2 Enterprise 64-bit note that this PoC will launch calc.exe $ java -cp ysoserial-0.0.6-SNAPSHOT-all.jar...

UBUNTU-CVE-2026-125073

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...

CVE-2026-125073

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...

EUVD-2026-120248

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...

CVE-2026-125073 FFmpeg through 9.0.2 Infinite Loop Denial of Service via IMC/IAC Decoder

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...

CVE-2026-125073 FFmpeg through 9.0.2 Infinite Loop Denial of Service via IMC/IAC Decoder

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bitallocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to nev...

PT-2026-140987

FFmpeg through 9.0.2 contains an infinite loop vulnerability in bit allocation in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. Attackers can craft IMC or IAC audio files that drive freebits negative, causing the reduction loop to...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in updateeventsingroup kasprintf returns a pointer to dynamically allocated memory which can be NULL upon failure...

CVE-2026-79842

An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) in versions prior to v7.3 E0713 . This flaw allows for unauthorized access, potentially impacting confidentiality and integrity with a CVSS v3.1 score of 9.1 . No specific root cause or exploit code is provid...

EUVD-2026-95262

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

PT-2026-108209

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC versions prior to 7.3 E0713 Description An authentication bypass issue exists, which allows an attacker to gain unauthorized access to the system by circumventing the authentication process. Recommendation...

CVE-2026-79842: Missing Authorization

An authentication bypass vulnerability exists in HPE Intelligent Management Center iMC prior to v7.3 E0713...

HPESBNW05157 rev.1 - HPE Intelligent Management Center (iMC), Remote Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC - Prior to v7.3 E0713 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-79842 |...

[SECURITY] Fedora 45 Update: libtnc-1.25-53.fc45

This library provides functions for loading and interfacing with loadable IMC Integrity Measurement Collector IMC and Integrity Measurement Verifier IMV modules as required by the Trusted Network Computing TNC IF-IMC and IF-IMV interfaces as described in:...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fixed the use of a mutex in the IRQs-disabled section. The current imc-pmu code triggers a warning when CONFIGDEBUGATOMICSLEEP is enabled and CONFIGPROVELOCKING is also enabled, while a threadimc event is running...

Cisco Integrated Management Controller Argument Injection (CVE-2026-20200) (cisco-sa-cimc-arg-inject-upSHdMfU)

According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability. - A command injection vulnerability exists in the web-based management interface of Cisco Integrated Management Controller IMC due to improper validation of user-supplied input. An...

Cisco Integrated Management Controller Cross-Site Scripting (cisco-sa-cimc-xss-7EhBFxBp)

According to its self-reported version, Cisco Integrated Management Controller is affected by a Cross-Site Scripting vulnerability. - A cross-site scripting XSS vulnerability exists in the web-based management interface of Cisco Integrated Management Controller IMC due to improper validation of...