CVE-2023-31361

A DLL hijacking vulnerability in AMD Integrated Management Technology AIM-T Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2023-31360

Incorrect default permissions in the AMD Integrated Management Technology AIM-T Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31360

Incorrect default permissions in the AMD Integrated Management Technology AIM-T Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2023-31360: Incorrect Default Permissions

Incorrect default permissions in the AMD Integrated Management Technology AIM-T Manageability Service installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

AMD Integrated Management Technology 安全漏洞

AMD Integrated Management Technology is a management technology from Ultraviolet Semiconductor AMD that is primarily used to enable AMD DASH management features on AMD PRO hardware. A security vulnerability exists in AMD Integrated Management Technology that stems from incorrect default permissio...

CVE-2023-31361: Uncontrolled Search Path Element

A DLL hijacking vulnerability in AMD Integrated Management Technology AIM-T Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

AIM-T Manageability Service Vulnerabilities

AMD ID: AMD-SB-9012 Potential Impact: Arbitrary Code Execution Severity: High Summary A researcher reported incorrect default permissions and Dynamic Link Library DLL hijacking vulnerabilities within AMD Integrated Management Technology AIM-T. AIM-T is designed to enable AMD Desktop and mobile...

CVE-2024-20295

A vulnerability in the CLI of the Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or high...

CVE-2024-20356

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability...

CVE-2020-26062

A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application. The vulnerability is due to differences in authentication responses sent back from the application as part of an authentication...

CVE-2020-26063

A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system without authorization. The vulnerability is due to improper authorization checks on API endpoints. An attack...

CVE-2020-26062

A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application. The vulnerability is due to differences in authentication responses sent back from the application as part of an authentication...

CVE-2020-26062 Cisco Integrated Management Controller Username Enumeration Vulnerability

A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application. The vulnerability is due to differences in authentication responses sent back from the application as part of an authentication...

CVE-2020-26062 Cisco Integrated Management Controller Username Enumeration Vulnerability

A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application. The vulnerability is due to differences in authentication responses sent back from the application as part of an authentication...

CVE-2020-26063 Cisco Integrated Management Controller Software Authorization Bypass Vulnerability

A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system without authorization. The vulnerability is due to improper authorization checks on API endpoints. An attack...

CVE-2020-26062: Observable Discrepancy

A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application. The vulnerability is due to differences in authentication responses sent back from the application as part of an authentication...

CVE-2020-26063: Improper Privilege Management

A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system without authorization. The vulnerability is due to improper authorization checks on API endpoints. An attack...

Arbitrary File Read Vulnerability in Puyuan Business Integrated Management Platform of Puyuan Information Technology Co.

Puyuan Information Technology Co., Ltd. is a leading data governance and low-code technology provider and full-stack middleware leader. An arbitrary file read vulnerability exists in the Puyuan Business Integrated Management Platform of Puyuan Information Technology Company Limited, which can be...

Cisco Integrated Management Controller Command Injection Vulnerability

Cisco Integrated Management Controller is the United States Cisco Cisco company's set of software for the management of UCS Unified Computing System. A command injection vulnerability exists in Cisco Integrated Management Controller. The vulnerability allows an authenticated attacker to perform a...

The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC), a device for remote administration of servers, allows a perpetrator to elevate their privileges to the root level.

The vulnerability in the web interface of the Cisco Integrated Management Controller IMC exists because measures to neutralize special elements used in the operating system commands have not been taken. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to the...