CVE-2017-6618

The CVE-2017-6618 entry concerns Cisco Integrated Management Controller (IMC) web GUI vulnerability in firmware 3.0(1c). The issue arises from insufficient input validation in the web-based GUI, enabling an authenticated, remote attacker to deliver a cross-site scripting (XSS) attack by convincin...

CVE-2017-6616: Improper Input Validation

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an authenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability exists because the affected software does not sufficiently sanitize specific values that are...

CVE-2017-6618: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input by the affected software. An attacker cou...

CVE-2017-6619: Improper Input Validation

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability exists because the affected software does not sufficiently sanitize user-supplied HTTP inpu...

PT-2017-17190

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC version 3.01c Description A vulnerability in the web-based GUI could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The issue exists because the software...

Cisco Integrated Management Controller Privilege Escalation Vulnerability (cisco-sa-20170419-cimc)

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to elevate the privileges of user accounts on the affected device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

Cisco Integrated Management Controller Remote Code Execution Vulnerability (cisco-sa-20170419-cimc3)

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to perform unauthorized remote command execution on the affected device. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability (cisco-sa-20170419-cimc1)

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

CVE-2017-6617: Improper Authentication

A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Management Controller IMC 3.01c could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected...

PT-2017-17188

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC version 3.01c Description A issue in the session identification management functionality of the web-based GUI could allow an unauthenticated, remote attacker to hijack a valid user session on an...

PT-2017-17189

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC version 3.01c Description The issue is related to insufficient validation of user-supplied input, which could allow an authenticated, remote attacker to perform a cross-site scripting XSS attack. An...

PT-2017-17187

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC version 3.01c Description A vulnerability in the web-based GUI could allow an authenticated, remote attacker to execute arbitrary code on an affected system. The issue exists because the software does...

Cisco Integrated Management Controller User Session Hijacking Vulnerability (cisco-sa-20170419-cimc2)

A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...

Cisco Integrated Management Controller Remote Code Execution Vulnerability

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to perform unauthorized remote command execution on the affected device. The vulnerability exists because the affected software does not sufficiently sanitize specifi...

Cisco Integrated Management Controller Cross-Site Scripting Vulnerability

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to perform a persistent cross-site scripting XSS attack. The vulnerability is due to insufficient validation of user-supplied input by the affected software. A successf...

Cisco Integrated Management Controller User Session Hijacking Vulnerability

A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to hijack a valid user session on an affected system. The vulnerability exists because the affected software do...

Cisco Integrated Management Controller Privilege Escalation Vulnerability

A vulnerability in the web-based GUI of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to elevate the privileges of user accounts on the affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerabili...

Cisco Integrated Management Controller Open Redirect Vulnerability

The Cisco Integrated Management Controller is the baseboard management controller that provides embedded server management for Cisco UCS C-Series Rack Servers. Cisco Integrated Management Controller IMC Software has a security vulnerability in the Web interface where a remote attacker redirects...

PT-2017-7184

Name of the Vulnerable Software and Affected Versions Dell Integrated Remote Access Controller iDRAC versions 6 before 2.85 Dell Integrated Remote Access Controller iDRAC versions 7/8 before 2.30.30.30 Description The issue is related to a cross-site scripting XSS problem. Cross-site scripting is...

CVE-2015-7272: Improper Restriction of Operations within the Bounds of a Memory Buffer

Dell Integrated Remote Access Controller iDRAC 6 before 2.80 and 7/8 before 2.21.21.21 allows attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via a long SSH username or input...