CVE-2015-0599

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web...

PT-2015-4743

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers affected versions not specified Description The issue is related to the web interface in Cisco Integrated Management Controller, which does n...

CVE-2015-0599: Undefined Security Weakness

The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System UCS on C-Series Rack Servers does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web...

CVE-2014-8003

Cisco Integrated Management Controller in Cisco UCS 2.2(2c)A and earlier is affected by CVE-2014-8003 due to improper input validation in the map-nfs command. This allows an authenticated, local attacker to gain shell-level access to the device. The issue is tied to Bug CSCup05998. Cisco’s adviso...

CVE-2014-8003: Improper Input Validation

Cisco Integrated Management Controller in Cisco Unified Computing System 2.22cA and earlier allows local users to obtain shell access via a crafted map-nfs command, aka Bug ID CSCup05998...

PT-2014-8375

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller in Cisco Unified Computing System versions 2.22cA and earlier Description The issue allows local users to obtain shell access via a crafted map-nfs command. Recommendations For versions 2.22cA and earlier...

Cisco Integrated Management Controller Privilege Escalation Vulnerability

Cisco Integrated Management Controller contains a vulnerability that could allow an authenticated, local attacker to gain shell-level access to the affected device. The vulnerability is due to improper input validation in the map-nfs command. An attacker could exploit this vulnerability by sendin...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477...

CVE-2014-7996

Cisco UCS Integrated Management Controller CIMC is affected by a CSRF vulnerability (CVE-2014-7996) in its web framework. An unauthenticated, remote attacker can perform a CSRF attack and hijack user sessions. The issue stems from insufficient CSRF protections in CIMC’s web interface. Impact as d...

Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability

A vulnerability in the web framework code of Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...

PT-2014-8368

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller in Cisco Unified Computing System affected versions not specified Description A cross-site request forgery CSRF issue in the web framework allows remote attackers to hijack the authentication of arbitrary...

CVE-2014-7996: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477...

Cisco Integrated Management Controller WebUI Detection

Binary data ciscoimcwebuidetect.nbin...

Cisco UCS Integrated Management Controller < 2.3(1) DoS (cisco-sa-20140908-ucse)

According to its self-reported version, the remote device is running a version of Cisco Integrated Management Controller IMC prior to 2.31 running on an E-series blade server. It is, therefore, affected by a flaw allowing a remote attacker to cause a denial of service by sending a specially craft...

Cisco Integrated Management Controller Vulnerability

Cisco has released an advisory to address a vulnerability in the Cisco Integrated Management Controller Cisco IMC SSH module of the Cisco Unified Computing System E-Series Blade servers that could allow an unauthenticated, remote attacker to cause a denial of service condition. Migration to relea...

Code injection

The SSH module in the Integrated Management Controller IMC before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service IMC hang via a crafted SSH packet, aka Bug ID CSCuo69206...

CVE-2014-3348

CVE-2014-3348 affects Cisco UCS IMC SSH on E-Series blade servers, with the SSH module prior to 2.3(1) vulnerable to remote, unauthenticated DoS (IMC hang) via a crafted SSH packet. Affected product: Cisco Integrated Management Controller (IMC) in UCS E-Series blade servers. Root cause: improper ...

PT-2013-2958

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS C-Series Rack Server component version 1.4 Description The issue allows remote attackers to cause a denial of service, potentially leading to an Integrated Management Controller reboot or hang, by sending...

Authentication flaw

Cisco Unified Computing System UCS 1.x before 1.44 and 2.x before 2.02m allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller IMC, aka Bug ID CSCts53746...

PT-2013-2954

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.x before 1.44 Cisco Unified Computing System UCS versions 2.x before 2.02m Description The issue allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco...