UBUNTU-CVE-2024-35952

In the Linux kernel, the following vulnerability has been resolved: drm/ast: Fix soft lockup There is a while-loop in astdpsetonoff that could lead to infinite-loop. This is because the register, VGACRI-Dx, checked in this API is a scratch register actually controlled by a MCU, named DPMCU, in BM...

PT-2024-25703 · Ipmi · Ipmi

Name of the Vulnerable Software and Affected Versions: IPMI affected versions not specified Description: The issue concerns implementations of IPMI Authenticated sessions that do not provide enough randomness, making them susceptible to session hijacking. An attacker can exploit this by using...

Cisco Integrated Management Controller Command Injection Vulnerability

Cisco Integrated Management Controller is the United States Cisco Cisco company's set of software for the management of UCS Unified Computing System. A command injection vulnerability exists in Cisco Integrated Management Controller. The vulnerability allows an authenticated attacker to perform a...

The vulnerability in the web interface of the Cisco Integrated Management Controller (IMC), a device for remote administration of servers, allows a perpetrator to elevate their privileges to the root level.

The vulnerability in the web interface of the Cisco Integrated Management Controller IMC exists because measures to neutralize special elements used in the operating system commands have not been taken. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to the...

CVE-2024-20295

A vulnerability in the CLI of the Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or high...

CVE-2024-20295

CVE-2024-20295 describes a command-injection vulnerability in the Cisco Integrated Management Controller (IMC) CLI. The issue stems from insufficient validation of user-supplied input, allowing an authenticated, local attacker with read-only or higher privileges to submit crafted CLI commands and...

CVE-2024-20295

A vulnerability in the CLI of the Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or high...

CVE-2024-20295

A vulnerability in the CLI of the Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or high...

CVE-2024-20356

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability...

Cisco Integrated Management Controller 操作系统命令注入漏洞

Cisco Integrated Management Controller IMC is a set of software from Cisco USA used to manage UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off, and rebooting the server. The Cisco Integrated Management...

Cisco Integrated Management Controller 操作系统命令注入漏洞

Cisco Integrated Management Controller is the United States Cisco Cisco company's set of software for the management of UCS Unified Computing System. A command injection vulnerability exists in Cisco Integrated Management Controller. The vulnerability allows an authenticated attacker to perform a...

Cisco Releases Security Advisories for Cisco Integrated Management Controller

Cisco has released security advisories for vulnerabilities in the Cisco integrated management controller. A remote cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following advisories and...

The vulnerability of the command-line interface of the Cisco Integrated Management Controller, a remote administration tool, allows a malicious actor to execute arbitrary commands on the underlying operating system and elevate their privileges to root-level.

The vulnerability of the command-line interface of the Cisco Integrated Management Controller remote administration software exists due to the lack of measures taken to neutralize the special commands used in the operating system’s command line. Exploiting this vulnerability allows an attacker to...

Cisco Integrated Management Controller Web-Based Management Interface Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability...

Cisco Integrated Management Controller CLI Command Injection Vulnerability

A vulnerability in the CLI of the Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or high...

PT-2024-2892 · Cisco · Cisco Integrated Management Controller

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC affected versions not specified Description: A vulnerability in the CLI of the Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to perform command injection...

PT-2024-3106 · Cisco · Cisco Integrated Management Controller

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC exists due to insufficient user input validation,...

The vulnerability of the Intel One Boot Flash Update (OFU) utility for updating BIOS and microprograms (BMC, FRU, and SDR) arises from a flaw in the data protection mechanism. This vulnerability allows an attacker to enhance their privileges.

The vulnerability of the Intel One Boot Flash Update OFU for updating BIOS and microprograms BMC, FRU, and SDR is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2023-40289

A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges...

CVE-2023-40289

A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges...