PT-2017-17190

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC version 3.01c Description A vulnerability in the web-based GUI could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The issue exists because the software...

CVE-2017-6619: Improper Input Validation

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability exists because the affected software does not sufficiently sanitize user-supplied HTTP inpu...