Description (CNA)
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user. Cisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Unified Computing System (Standalone) | affected 4.0(2g); affected 3.1(2i); affected 3.1(1d); affected 4.0(4i); affected 4.1(1c); affected 4.0(2c); affected 4.0(1e); affected 4.0(2h); affected 4.0(4h); affected 4.0(1h); affected 4.0(2l); affected 3.1(3g); affected 4.0(1.240); affected 4.0(2f); affected 4.0(1g); affected 4.0(2i); affected 3.1(3i); affected 4.0(4d); affected 4.1(1d); affected 3.1(3c); affected 4.0(4k); affected 3.1(2d); affected 3.1(3a); affected 3.1(3j); affected 4.0(2d); affected 4.1(1f); affected 4.0(1c); affected 4.0(4f); affected 4.0(4c); affected 3.1(3d); affected 3.1(2g); affected 3.1(2c); affected 4.0(1d); affected 3.1(2e); affected 4.0(1a); affected 4.0(1b); affected 3.1(3b); affected 4.0(4b); affected 3.1(2b); affected 4.0(4e); affected 3.1(3h); affected 4.0(4l); affected 4.1(1g); affected 4.1(2a); affected 4.0(2n); affected 4.1(1h); affected 3.1(3k); affected 4.1(2b); affected 4.0(2o); affected 4.0(4m); affected 4.1(2d); affected 4.1(3b); affected 4.0(2p); affected 4.1(2e); affected 4.1(2f); affected 4.0(4n); affected 4.0(2q); affected 4.1(3c); affected 4.0(2r); affected 4.1(3d); affected 4.1(2g); affected 4.1(2h); affected 4.1(3f); affected 4.1(2j); affected 4.1(2k); affected 4.1(3h); affected 4.2(2a); affected 4.1(3i); affected 4.2(2f); affected 4.2(2g); affected 4.2(3b); affected 4.1(3l); affected 4.2(3d); affected 4.3(1.230097); affected 4.2(1e); affected 4.2(1b); affected 4.2(1j); affected 4.2(1i); affected 4.2(1f); affected 4.2(1a); affected 4.2(1c); affected 4.2(1g); affected 4.3(1.230124); affected 4.1(2l); affected 4.2(3e); affected 4.3(1.230138); affected 4.2(3g); affected 4.3(2.230207); affected 4.2(3h); affected 4.2(3i); affected 4.3(2.230270); affected 4.1(3m); affected 4.1(2m); affected 4.3(2.240002); affected 4.3(3.240022); affected 4.2(3j); affected 4.1(3n); affected 4.3(2.240009); affected 4.3(3.240043); affected 4.3(4.240142); affected 4.3(2.240037); affected 4.3(2.240053); affected 4.3(4.240152); affected 4.2(3l); affected 4.3(2.240077); affected 4.3(4.242028); affected 4.3(4.241063); affected 4.3(4.242038); affected 4.2(3m); affected 4.3(2.240090); affected 4.3(5.240021); affected 4.3(2.240107); affected 4.3(4.242066); affected 4.2(3n); affected 4.3(5.250001); affected 4.2(3o); affected 4.3(2.250016); affected 4.3(2.250021); affected 4.3(5.250030); affected 4.3(2.250022); affected 4.3(6.250040); affected 4.3(5.250033); affected 4.3(6.250044); affected 4.3(6.250053); affected 4.3(2.250037); affected 4.3(2.250045); affected 4.3(4.252001); affected 4.3(4.252002); affected 6.0(1.250127); affected 4.2(3p); affected 6.0(1.250131); affected 4.3(6.250101); affected 6.0(1.250174); affected 4.3(6.250117); affected 4.3(5.250043); affected 4.3(6.250039); affected 4.3(5.250045); affected 4.3(6.250060); affected 6.0(1.250130); affected 4.3(4.241014); affected 4.3(2.250063); affected 6.0(1.250192); affected 4.3(6.260003); affected 6.0(1.250194) |
CWE
CWE-787
References
ADP enrichment
No English description supplied.
No references supplied.