Cisco Integrated Management Controller Privilege Escalation Vulnerability

Cisco Integrated Management Controller contains a vulnerability that could allow an authenticated, local attacker to gain shell-level access to the affected device. The vulnerability is due to improper input validation in the map-nfs command. An attacker could exploit this vulnerability by sendin...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477...

CVE-2014-7996

Cisco UCS Integrated Management Controller CIMC is affected by a CSRF vulnerability (CVE-2014-7996) in its web framework. An unauthenticated, remote attacker can perform a CSRF attack and hijack user sessions. The issue stems from insufficient CSRF protections in CIMC’s web interface. Impact as d...

Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability

A vulnerability in the web framework code of Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack. The vulnerability is due to insufficient CSRF protections. An attacker could exploit this vulnerability by...

CVE-2014-7996: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477...

PT-2014-8368

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller in Cisco Unified Computing System affected versions not specified Description A cross-site request forgery CSRF issue in the web framework allows remote attackers to hijack the authentication of arbitrary...

Cisco Integrated Management Controller WebUI Detection

Binary data ciscoimcwebuidetect.nbin...

Cisco UCS Integrated Management Controller < 2.3(1) DoS (cisco-sa-20140908-ucse)

According to its self-reported version, the remote device is running a version of Cisco Integrated Management Controller IMC prior to 2.31 running on an E-series blade server. It is, therefore, affected by a flaw allowing a remote attacker to cause a denial of service by sending a specially craft...

Cisco Integrated Management Controller Vulnerability

Cisco has released an advisory to address a vulnerability in the Cisco Integrated Management Controller Cisco IMC SSH module of the Cisco Unified Computing System E-Series Blade servers that could allow an unauthenticated, remote attacker to cause a denial of service condition. Migration to relea...

Code injection

The SSH module in the Integrated Management Controller IMC before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service IMC hang via a crafted SSH packet, aka Bug ID CSCuo69206...

CVE-2014-3348

CVE-2014-3348 affects Cisco UCS IMC SSH on E-Series blade servers, with the SSH module prior to 2.3(1) vulnerable to remote, unauthenticated DoS (IMC hang) via a crafted SSH packet. Affected product: Cisco Integrated Management Controller (IMC) in UCS E-Series blade servers. Root cause: improper ...

CVE-2014-0860: Undefined Security Weakness

The firmware before 3.66E in IBM BladeCenter Advanced Management Module AMM, the firmware before 1.43 in IBM Integrated Management Module IMM, and the firmware before 4.15 in IBM Integrated Management Module II IMM2 contains cleartext IPMI credentials, which allows attackers to execute arbitrary...

PT-2014-3898

Name of the Vulnerable Software and Affected Versions IBM BladeCenter Advanced Management Module AMM versions prior to 3.66E IBM Integrated Management Module IMM versions prior to 1.43 IBM Integrated Management Module II IMM2 versions prior to 4.15 Description The issue allows attackers to execut...

JP1/Integrated Management - Service Support vulnerable to cross-site scripting

Overview JP1/Integrated Management - Service Support has a cross-site scripting vulnerability, which occurs when receiving a request that contains malicious scripts when being used with JP1/Integrated Management - View. Impact An attacker can exploit this vulnerability to execute malicious script...

Hitachi JP1/Integrated Management跨站脚本漏洞

Hitachi JP1/Integrated Management是实时监控服务器管理系统并且提交故障解决方案的综合管理系统。 由于某些关于查看的未明输入在返回用户钱未能正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器中执行任意HTML 和脚本代码。 0 Hitachi JP1/Integrated Management IM 厂商补丁： Hitachi ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2013-4030: Undefined Security Weakness

Integrated Management Module IMM 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against 1 SSL or 2 TLS traffic...

PT-2014-2732

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM 2 versions 1.00 through 2.00 Description The issue allows remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against SSL or TLS traffic, due to the support of SSL cipher...

PT-2013-4806

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM and Integrated Management Module II IMM2 affected versions not specified Description The issue concerns the RAKP protocol support in the Intelligent Platform Management Interface IPMI implementation, which send...

PT-2013-4807

Name of the Vulnerable Software and Affected Versions Integrated Management Module IMM on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers affected versions not specified Description The issue concerns the Intelligent Platform Management Interface IPMI implementation in...

CVE-2013-4031: Undefined Security Weakness

The Intelligent Platform Management Interface IPMI implementation in Integrated Management Module IMM and Integrated Management Module II IMM2 on IBM BladeCenter, Flex System, System x iDataPlex, and System x3 servers has a default password for the IPMI user account, which makes it easier for...