WID-SEC-2025-1240 — Cisco Integrated Management Controller: Schwachstelle ermöglicht Privilegieneskalation

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Integrated Management Controller ausnutzen, um seine Privilegien zu erhöhen.

Product

Der Cisco Integrated Management Controller ist eine Serververwaltung für mehrere Cisco-Produkte.

Vulnerabilities 1

High 8.8

CVE-2025-20261

Cisco Integrated Management Controller Privilege Escalation Vulnerability

A vulnerability in the SSH connection handling of Cisco Integrated Management Controller (IMC) for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker to access internal services with elevated…

Cisco Cisco Unified Computing System (Managed) Cisco Unified Computing System (Standalone) Network devices

Jun 4, 2025

Revision history

2025-06-04 #1
Initiale Fassung

References

Cisco Security Advisory cisco-sa-ucs-ssh-priv-esc-2mZDtdjM vom 2025-06-04
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-ssh-priv-esc-2mZDtdjM