CVE-2018-0431 Cisco Integrated Management Controller Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on an affected device. The vulnerability is due to insufficient validation of...

CVE-2018-0430 Cisco Integrated Management Controller Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on an affected device. The vulnerability is due to insufficient validation of...

CVE-2018-15404 Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient restrictions on the size or...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from privilege management errors, allowing a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is caused by privilege management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources Denial of Service Vulnerability

A vulnerability in the web interface of Cisco Integrated Management Controller IMC Supervisor and Cisco UCS Director could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to insufficient restrictions on the size or...

Intel Power Management Controller Information Disclosure Vulnerability

Intel Power Management Controller is a power management controller from Intel Corporation USA. A security vulnerability exists in Intel Power Management Controller. A local attacker could exploit this vulnerability to disclose sensitive information about the platform...

Power Management Controller (PMC) Security Vulnerability in Systems using specific Intel® CMSE or SPS firmware versions - US

Lenovo Security Advisory: LEN-22678 Potential Impact: Elevation of Privilege; Information Disclosure Severity: High Scope of Impact: Industry-wide - Systems using specific Intel® Converged Security and Management Engine CSME or Intel® Server Platform Services SPS firmware versions CVE Identifier:...

Unspecified Vulnerability in Intel Power Management Controller

Intel Atom Processor C3000 Series Platform and so on are the processor products of the American Intel Intel company.Intel Power Management Controller is one of the power management controller. A security vulnerability exists in Intel Power Management Controller. This vulnerability can be exploite...

CVE-2018-3643

A vulnerability in Power Management Controller firmware in systems using specific IntelR Converged Security and Management Engine CSME before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or IntelR Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative...

CVE-2018-12171

Privilege escalation in Intel Baseboard Management Controller BMC firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of service over the network...

CVE-2018-3643

A vulnerability in Power Management Controller firmware in systems using specific IntelR Converged Security and Management Engine CSME before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or IntelR Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative...

CVE-2018-3643

CVE-2018-3643 concerns a vulnerability in Intel Power Management Controller (PMC) firmware affecting systems with Intel CSME before 11.8.55, 11.11.55, 11.21.55, or 12.0.6, and Intel Server Platform Services (SPS) firmware before 4.x.04. The flaw could allow an attacker with administrative privile...

Cisco Integrated Management Controller Command Injection Vulnerability

Cisco Integrated Management Controller IMC Software is a set of software used to perform management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and allows you to power on, power off, and reboot the server. A command injection vulnerability exists in the web-base...

Cisco Integrated Management Controller Command Injection Vulnerability

Cisco Integrated Management Controller IMC Software is a set of software used to perform management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and allows you to power on, power off, and reboot the server. A command injection vulnerability exists in the web-base...

Cisco Integrated Management Controller Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on an affected device. The vulnerability is due to insufficient validation of...

Cisco Integrated Management Controller Supervisor and Cisco UCS Director DOM Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow an authenticated, remote attacker to conduct a Document Object Model-based DOM-based, stored cross-site scripting XSS attack against a us...

Intelligent Baseboard Management Controller elevation of privilege vulnerability in multiple Huawei products (CNVD-2018-11504)

Huawei 1288H V5 and others are different models of server equipment from Huawei, China.Intelligent Baseboard Management Controller iBMC is one of the embedded server intelligent management system. A security vulnerability exists in iBMC in several Huawei products, which stems from the program...

Intelligent Baseboard Management Controller elevation of privilege vulnerability in multiple Huawei products

Huawei 1288H V5 and others are different models of server equipment from Huawei, China.Intelligent Baseboard Management Controller iBMC is one of the embedded server intelligent management system. A privilege-lifting vulnerability exists in iBMC in several Huawei products. A remote attacker could...

CVE-2018-7942

The iBMC Intelligent Baseboard Management Controller of some Huawei servers have an authentication bypass vulnerability. An unauthenticated, remote attacker may send some specially crafted messages to the affected products. Due to improper authentication design, successful exploit may cause some...

Huawei iBMC Elevation of Privilege Vulnerability

Huawei iBMC is an embedded intelligent management system for servers developed by Huawei. The system features remote operation and maintenance, troubleshooting, intelligent management, and standardized interface management. An authentication bypass vulnerability exists in Huawei iBMC version...