cisco-sa-imc-gui-dos-TZjrFyZh

Cisco Integrated Management Controller GUI Denial of Service Vulnerability

Advisory ansehen veröffentlicht 2021-10-20

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause the interface to restart, resulting in a denial of service (DoS) condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2021-34736US	high7.5	1.27% (70th)	—	2021-10-21
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-base…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Cisco Integrated Management Controller GUI Denial of Service Vulnerabilityself
Cisco Security Vulnerability Policyexternal
considering software upgradesexternal
Cisco Security Advisories pageexternal

Behebungen (1)

BehobenCisco Unified Computing System (Standalone)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan