Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Cisco Integrated Management Controller ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen oder beliebigen Code mit Root-Rechten auszuführen.
Product
Der Cisco Integrated Management Controller ist eine Serververwaltung für mehrere Cisco-Produkte.
Cisco Secure Endpoint bietet Virenschutz und erweiterte Endpunkt-Erkennung und -Reaktion.
Das Cisco Secure Firewall Management Center ist eine zentralisierte Plattform, die eine Verwaltung und Überwachung von Cisco Firewall-Geräten ermöglicht.
Cisco Secure Network Server bietet Dienste zur Identitäts- und Zugriffsverwaltung.
Vulnerabilities 3
-
High 8.8CVE-2026-20200 Public exploit
Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. T…
-
Medium 6.5
Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.&…
-
Medium 4.8
Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to in…
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory cisco-sa-cimc-arg-inject-upSHdMfU vom 2026-08-05
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-arg-inject-upSHdMfU
-
Cisco Security Advisory cisco-sa-cimc-xss-7EhBFxBp vom 2026-08-05
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-7EhBFxBp