The vulnerability of the integrated management module (IMM) of IBM System x3550 M3 and IBM System x3650 M3 allows a hacker to execute arbitrary operating system commands.

The vulnerability of the Integrated Management Module IMM of IBM System x3550 M3 and IBM System x3650 M3 exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

IBM System x servers operating system command injection vulnerability

IBM System x servers are a server from International Business Machines Corporation IBM, and an operating system command injection vulnerability exists in the Integrated Management Module IMM of IBM System x 3550 M3 and IBM System x 3650 M3 servers, which could be exploited by an attacker to execu...

CVE-2021-3723

A command injection vulnerability was reported in the Integrated Management Module IMM of legacy IBM System x 3550 M3 and IBM System x 3650 M3 servers that could allow the execution of operating system commands over an authenticated SSH or Telnet session...

IBM System x servers 操作系统命令注入漏洞

IBM System x servers are a server from International Business Machines Corporation IBM, and an operating system command injection vulnerability exists in the Integrated Management Module IMM of IBM System x 3550 M3 and IBM System x 3650 M3 servers, which could be exploited by an attacker to execu...

Cisco Integrated Management Controller GUI DoS (cisco-sa-imc-gui-dos-TZjrFyZh)

According to its self-reported version, Cisco Integrated Management Controller is affected by a denial of service DoS vulnerability in its web-based management interface due to insufficient validation of user-supplied input. An unauthenticated, remote attacker can exploit this issue, by sending...

CVE-2021-34736

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the...

CVE-2021-34736

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the...

CVE-2021-34736 Cisco Integrated Management Controller GUI Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the...

CVE-2021-34736 Cisco Integrated Management Controller GUI Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the...

Cisco Integrated Management Controller 输入验证错误漏洞

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down, and rebooting servers. An input...

SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Group Co.

Anhui Kexun Education Equipment Group Co., Ltd. is a comprehensive service provider dedicated to industry software research and development, promotion and service. There is a SQL injection vulnerability in the Digital Campus Management System of Anhui Kexun Education Equipment Group Co., Ltd, whi...

Cisco Integrated Management Controller Command Injection (cisco-sa-CIMC-CIV-pKDBe9x5)

According to its self-reported version, Cisco Integrated Management Controller IMC is affected by a vulnerability in the web UI that allows an authenticated, remote attacker to inject arbitrary code and execute arbitrary commands at the underlying operating system level. The vulnerability is due ...

Weak Password Vulnerability in Zhongfu Information Security and Confidentiality Comprehensive Management Platform

Founded in 2002, CDF Information specializes in the research, development, sales and provision of total solutions for information security products. A weak password vulnerability exists in Zung Fu's comprehensive information security and confidentiality management platform, which can be exploited...

Cisco Integrated Management Controller Username Enumeration (cisco-sa-cimc-enum-CyheP3B7)

According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability due to differences in authentication responses sent back from the application as part of an authentication attempt. An unauthenticated, remote attacker can exploit this, by by sending...

SQL Injection Vulnerability in Intelligent Park Integrated Management Platform of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a SQL injection vulnerability in the integrated management platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by an attacker to obtain sensitive...

SQL Injection Vulnerability in Intelligent Park Comprehensive Management Platform of Zhejiang Dahua Technology Co.(CNVD-2021-51489)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a SQL injection vulnerability in the integrated management platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by an attacker to obtain sensitive...

Weak Password Vulnerability in Intelligent Building Integrated Management Platform of Qingdao Neusoft Carrier Intelligent Electronics Co.

Qingdao Neusoft Carrier Intelligent Electronics Co., Ltd. is a high-tech enterprise integrating R&D, production, office and life. Qingdao Neusoft Carrier Intelligent Electronics Co., Ltd. intelligent building integrated management platform has a weak password vulnerability, which can be exploited...

Logic flaw vulnerability in the comprehensive management platform of Beijing Zhongcheng Kexin Science and Technology Development Co., Ltd (CNVD-2021-48961)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a leading travel industry chain service provider with high market share in China. There is a logic flaw vulnerability in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd. that can be...

Logic Flaw Vulnerability in Dahua Integrated Management Platform DSS

Dahua Comprehensive Management Platform DSS is a management platform for managing security protection monitoring equipment, realizing real-time monitoring and video playback of multiple devices and channels. Dahua Integrated Management Platform DSS suffers from a logic flaw vulnerability that can...

Unauthorized Access Vulnerability in the Integrated Management Platform of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a leading travel industry chain service provider with high market share in China. An unauthorized access vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd, which can b...