Cisco Integrated Management Controller: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Summary

Product

Vulnerabilities 2

• High 8.8
  CVE-2024-20295

  A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local atta…

  Cisco Cisco Unified Computing System E-Series Software (UCSE) Cisco Unified Computing System (Standalone) Network devices
  Apr 24, 2024
• High 8.7
  CVE-2024-20356 Public exploit EPSS 30%

  A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an au…

  Cisco Cisco Unified Computing System E-Series Software (UCSE) Cisco Unified Computing System (Standalone) Network devices
  Apr 24, 2024

Revision history

1. 2024-04-17 #1

   Initiale Fassung

References

• Cisco Security Advisory vom 2024-04-17
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-bLuPcb
• Cisco Security Advisory vom 2024-04-17
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-mUx4c5AJ