CVE-2016-4372

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAMTAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apach...

CVE-2016-4372

CVE-2016-4372 affects HPE HP iMC suite (PLAT, EAD, APM, NTA, BIMS, UAM_TAM) prior to 7.2 E0403P04/E0405P05/E0401P04/E0401P01/E0402P02/E0405P05. The vulnerability stems from unsafe Java deserialization via the Apache Commons Collections (ACC) library, allowing remote attackers to execute arbitrary...

CVE-2016-4372: Improper Input Validation

HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAMTAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apach...

IMC TV - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application IMC TV published at the 'play' market has multiple vulnerabilities...

CVE-2015-6399

CVE-2015-6399 affects Cisco Integrated Management Controller (IMC) 1.0.0.0/1.0.0.1 before 2.0(9). The issue arises from insufficient input sanitization for certain HTTP parameters, enabling an authenticated remote attacker to craft an HTTP request that causes the IMC IP interface to become inacce...

CVE-2015-6259

CVE-2015-6259 affects Cisco Integrated Management Controller (IMC) Supervisor prior to 1.0.0.1 and Cisco UCS Director prior to 5.2.0.1. The JSP component enables remote attackers to overwrite arbitrary files via crafted HTTP requests, a vulnerability tracked as CSCus36435/CSCus62625. The issue is...

PT-2015-7142

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Supervisor versions prior to 1.0.0.1 Cisco UCS Director formerly Cloupia Unified Infrastructure Controller versions prior to 5.2.0.1 Description The issue allows remote attackers to write to arbitrary...

Cisco Patches File Overwrite Bug in IMC Supervisor and UCS Director

Cisco has patched a remote file-overwrite vulnerability in a couple of its products that could allow an attacker to replace arbitrary files and cause target systems to become unstable. The vulnerability affects the Cisco Integrated Management Controlled Supervisor and UCS Director software. The...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in its Integrated Management Controller IMC Supervisor and the UCS Director formally known as Cloupia Unified Infrastructure Controller. Exploitation of these vulnerabilities may allow a remote attacker to gain unauthorized access or...

Cisco Integrated Management Controller Supervisor and Cisco UCS Director Remote File Overwrite Vulnerability

Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director contain a remote file overwrite vulnerability that could allow an unauthenticated, remote attacker to overwrite arbitrary system files, resulting in system instability or a denial of service DoS condition. Cisco has...

CVE-2015-0633

The Integrated Management Controller IMC in Cisco Unified Computing System UCS 1.47h and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876...

Design/Logic Flaw

The Integrated Management Controller IMC in Cisco Unified Computing System UCS 1.47h and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876...

CVE-2015-0633

The CVE-2015-0633 issue affects Cisco Unified Computing System (UCS) C-Series servers’ Integrated Management Controller (IMC). The vulnerability arises from insufficient input validation of DHCP response packets, enabling an unauthenticated, adjacent attacker on the local network to bypass intend...

CVE-2015-0633: Improper Input Validation

The Integrated Management Controller IMC in Cisco Unified Computing System UCS 1.47h and earlier on C-Series servers allows remote attackers to bypass intended access restrictions by sending crafted DHCP response packets on the local network, aka Bug ID CSCuf52876...

Cisco Integrated Management Controller Detection

Binary data ciscoimcdetect.nbin...

Cisco Patches Denial-of-Services Vulnerability in IMC

US-CERT today released an advisory warning of a vulnerability in Cisco’s Integrated Management Controller IMC. Cisco released an update that patches the security hole. The IMC is a baseboard management controller that oversees embedded servers inside Cisco Unified Computing System E-Series Blade...

CVE-2014-3348

The SSH module in the Integrated Management Controller IMC before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service IMC hang via a crafted SSH packet, aka Bug ID CSCuo69206...

CVE-2014-3348

CVE-2014-3348 affects Cisco UCS IMC SSH on E-Series blade servers, with the SSH module prior to 2.3(1) vulnerable to remote, unauthenticated DoS (IMC hang) via a crafted SSH packet. Affected product: Cisco Integrated Management Controller (IMC) in UCS E-Series blade servers. Root cause: improper ...

CVE-2014-3348

The SSH module in the Integrated Management Controller IMC before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service IMC hang via a crafted SSH packet, aka Bug ID CSCuo69206...

CVE-2014-3348: Improper Input Validation

The SSH module in the Integrated Management Controller IMC before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service IMC hang via a crafted SSH packet, aka Bug ID CSCuo69206...