DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Cisco Integrated Management Controller: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-04-01
Ein Angreifer kann mehrere Schwachstellen in Cisco Integrated Management Controller ausnutzen, um Administratorrechte zu erlangen, beliebigen Code mit Root-Rechten auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.
01
beschreibt (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-20097US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root u… | ||||
| CVE-2026-20096US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on… | ||||
| CVE-2026-20095US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on… | ||||
| CVE-2026-20094US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on a… | ||||
| CVE-2026-20093US | — | — | ||
A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and ga… | ||||
| CVE-2026-20090US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20089US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20088US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20087US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20085US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Security Advisory cisco-sa-cimc-auth-bypass-AgG2BxTn vom 2026-04-01external
- Cisco Security Advisory cisco-sa-cimc-cmd-inj-3hKN3bVt vom 2026-04-01external
- Cisco Security Advisory cisco-sa-cimc-xss-A2tkgVAB vom 2026-04-01external
- WID-SEC-W-2026-0953 - CSAF Versionself
- WID-SEC-2026-0953 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan