integrated management controller vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

The flow_dissector feature in the Linux kernel 4.3 up to and including 5.x prior to 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (inste...

Linux Linux Kernel Debian Debian Linux 8.0 Netapp A700s Firmware -Netapp 8300 Firmware -Netapp 8700 Firmware -Netapp A400 Firmware -Netapp H610s Firmware -Netapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp Data Availability Services -Netapp E-series Santricity Os Controller Netapp Hci Management Node -Netapp Solidfire -Netapp Steelstore Cloud Integrated Storage -

4.3

CVSSv2

A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an unauthenticated, remote malicious user to hijack a valid user session on an affected system. The vulnerability exists...

Cisco Integrated Management Controller Supervisor 3.0\\(1c\\)

7.8

CVSSv2

Memory leak on the Cisco Wireless LAN Controller (WLC) platform 4.x prior to 4.2.205.0, 5.1 prior to 5.1.163.0, and 5.0 and 5.2 prior to 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), ...

Cisco Cisco 4200 Wireless Lan Controller 4.1m Cisco Cisco 4400 Wireless Lan Controller 4.1m Cisco Cisco 2000 Wireless Lan Controller 4.2 Cisco Cisco 2100 Wireless Lan Controller 4.2 Cisco Cisco 2000 Wireless Lan Controller 5.0 Cisco Cisco 2000 Wireless Lan Controller 5.1 Cisco Cisco 2100 Wireless Lan Controller 4.1m Cisco Cisco 4100 Wireless Lan Controller 4.1m Cisco Cisco 4200 Wireless Lan Controller 4.1 Cisco Cisco 1500 Wireless Lan Controller 4.2 Cisco Cisco 1500 Wireless Lan Controller 5.1 Cisco Cisco 1500 Wireless Lan Controller 5.2 Cisco Cisco 4100 Wireless Lan Controller 5.0 Cisco Cisco 4100 Wireless Lan Controller 5.1 Cisco Cisco 4100 Wireless Lan Controller 5.2 Cisco Cisco 4200 Wireless Lan Controller 5.0 Cisco Cisco 4200 Wireless Lan Controller 5.1 Cisco Catalyst 3750g Cisco Cisco 4400 Wireless Lan Controller 4.1 Cisco Cisco 1500 Wireless Lan Controller 4.1 Cisco Cisco 2000 Wireless Lan Controller 4.1 Cisco Cisco 4100 Wireless Lan Controller 4.2

10

CVSSv2

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote malicious user to bypass user authentication and gain access as...

Cisco Integrated Management Controller Supervisor 2.1.0.0 Cisco Integrated Management Controller Supervisor Cisco Ucs Director Cisco Ucs Director 6.7\\(1.1\\)Cisco Ucs Director 6.7\\(2.0\\)Cisco Ucs Director Express For Big Data Cisco Ucs Director Express For Big Data 3.6.1.0 Cisco Ucs Director Express For Big Data 3.6.0.0

1 Article

NA

A vulnerability in Cisco Integrated Management Controller could allow an unauthenticated, remote attacker to enumerate valid usernames within the vulnerable application. The vulnerability is due to differences in authentication responses sent back from the application as part of ...

3.5

CVSSv2

A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote malicious user to perform a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input by the affec...

Cisco Integrated Management Controller Supervisor 3.0\\(1c\\)

9

CVSSv2

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote malicious user to inject and execute arbitrary commands with root privileges on an affected device. The vulnerability is due to insu...

Cisco Unified Computing System 3.0\\(3a\\)Cisco Unified Computing System 3.1\\(3\\)Cisco Unified Computing System 2.0 Base

5.8

CVSSv2

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote malicious user to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameter...

NA

A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system without authorization. The vulnerability is due to improper authorization checks on API end...

9

CVSSv2

A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote malicious user to cause a denial of service (DoS) condition and implement arbitrary commands with root privileges on an affected devi...

Cisco Unified Computing System 4.0\\(1c\\)hs3 Cisco Integrated Management Controller Supervisor

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook