cisco integrated management controller supervisor vulnerabilities and exploits

(subscribe to this query)

A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote malicious user to log in to the CLI of an affected system by using the SCP User account (scpuser), wh...

Cisco Integrated Management Controller Supervisor Cisco Integrated Management Controller Supervisor 2.1.0.0 Cisco Ucs Director 6.7\\(0.0.67265\\)Cisco Ucs Director 6.0.0.0 Cisco Ucs Director 6.5.0.0 Cisco Ucs Director 6.6.0.0 Cisco Ucs Director 6.6.1.0 Cisco Ucs Director 6.7.0.0 Cisco Ucs Director 6.7.1.0 Cisco Ucs Director Express For Big Data 3.6.0.0 Cisco Ucs Director Express For Big Data 3.0.0.0 Cisco Ucs Director Express For Big Data 3.5.0.0 Cisco Ucs Director Express For Big Data 3.7.0.0 Cisco Ucs Director Express For Big Data 3.7.1.0

1 EDB exploit1 Article

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote malicious user to acquire a valid session token with administra...

Cisco Integrated Management Controller Supervisor Cisco Ucs Director Cisco Ucs Director 6.7\\(0.0.67265\\)Cisco Ucs Director Express For Big Data 3.6.0.0 Cisco Ucs Director Express For Big Data

1 EDB exploit2 Metasploit modules1 Article

A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an unauthenticated, remote malicious user to hijack a valid user session on an affected system. The vulnerability exists...

Cisco Integrated Management Controller Supervisor 3.0\\(1c\\)

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition. Th...

Cisco Integrated Management Controller Supervisor Cisco Ucs Director 6.6.1.0 Cisco Ucs Director Express For Big Data 3.6.0.0 Cisco Ucs Director Express For Big Data 3.6.1.0 Cisco Ucs Director Express For Big Data Cisco Ucs Director 6.6.0.0 Cisco Ucs Director

1 Article

A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote malicious user to perform a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input by the affec...

Cisco Integrated Management Controller Supervisor 3.0\\(1c\\)

The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC) Supervisor prior to 1.0.0.1 and UCS Director (formerly Cloupia Unified Infrastructure Controller) prior to 5.2.0.1 allows remote malicious users to write to arbitrary files via crafted HTTP reque...

Cisco Integrated Management Controller Supervisor Cisco Unified Computing System Director 4.0 Base Cisco Unified Computing System Director 5.0.0.0 Cisco Unified Computing System Director Cisco Unified Computing System Director 5.0.0.1 Cisco Unified Computing System Director 5.0.0.2 Cisco Unified Computing System Director 5.0.0.3 Cisco Unified Computing System Director 5.1.0.1 Cisco Unified Computing System Director 3.4 Base Cisco Unified Computing System Director 4.1 Base Cisco Unified Computing System Director 5.1.0.0

A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow a read-only authenticated, remote malicious user to disable user accounts on an affected system. Th...

Cisco Integrated Management Controller Supervisor Cisco Ucs Director Cisco Ucs Director Express For Big Data

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1149 Github repositories28 Articles

Apache Log4j2 versions 2.0-alpha1 up to and including 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted strin...

74 Github repositories5 Articles

Apache Log4j2 versions 2.0-beta7 up to and including 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the tar...

34 Github repositories4 Articles

« PREV 1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook