CVE-2019-1649

CVE-2019-1649 concerns Cisco’s Secure Boot Trust Anchor module (TAm). The flaw stems from an improper check in the FPGA/ Trust Anchor bitstream handling, enabling an authenticated, local attacker with OS access to write a modified firmware image to the FPGA. Consequences include potential device ...

CVE-2023-20228

CVE-2023-20228 concerns Cisco Integrated Management Controller (IMC) web-based management interface. The issue is an XSS vulnerability caused by insufficient input validation, exploitable by an unauthenticated, remote attacker who entices a user to click a crafted link. Successful exploitation co...

CVE-2021-1397

Cisco IMC Open Redirect vulnerability (CVE-2021-1397) affects the web-based management interface of Cisco Integrated Management Controller software. Type: improper input validation in HTTP request parameters, exploitable via a crafted link to redirect users to a malicious site. Impact is open red...