cisco integrated management controller supervisor

Name: cisco integrated management controller supervisor
Brand: cisco

productUS

cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical17high6medium0low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	2.3.2.1	2021-12-10	3 versions
CVE-2019-1935US	critical9.8OT high	83.4% (100th)	Exploit	no fix	2019-08-21	2 versions
CVE-2019-1937US	critical9.8	75.9% (100th)	Exploit	no fix	2019-08-21	2.2.0.3 → 2.2.0.6
CVE-2019-1936US	high7.2	39.5% (99th)	Exploit	no fix	2019-08-21	2 versions
CVE-2019-1974US	critical9.8	4.49% (91st)	—	no fix	2019-08-21	2 versions
CVE-2017-6616US	high8.8	4.24% (91st)	—	no fix	2017-04-20	= 3.0(1c)
CVE-2019-1885US	high7.2	3.80% (90th)	—	4.0\(2f\)	2019-08-21	3 versions
CVE-2019-1865US	high8.8	3.57% (89th)	—	3.0\(4k\)	2019-08-21	6 versions
CVE-2019-1850US	high7.2	3.51% (89th)	—	4.0\(2f\)	2019-08-21	3 versions
CVE-2019-1871US	high7.2	3.29% (88th)	—	4.0\(4b\)	2019-08-21	2 versions
CVE-2015-6259US	high9.4	2.82% (86th)	—	no fix	2015-09-04	≤ 1.0.0.0
CVE-2019-1634US	high7.2	2.81% (86th)	—	1.5\(9g\)	2019-08-21	5 versions
CVE-2017-6619US	high8.8	2.64% (85th)	—	no fix	2017-04-20	= 3.0(1c)
CVE-2019-1864US	high8.8	2.63% (85th)	—	4.0\(1d\)	2019-08-21	6 versions
CVE-2015-6399US	medium6.8	2.19% (82nd)	—	no fix	2015-12-15	2 versions
CVE-2019-12634US	high7.5OT elevated	2.05% (81st)	—	no fix	2019-08-21	2.2.0.3 → 2.2.0.6
CVE-2019-1908US	high7.5	2.00% (81st)	—	4.0\(4b\)	2019-08-21	4 versions
CVE-2019-1900US	high7.5	1.90% (80th)	—	4.0\(2f\)	2019-08-21	4.0.0.0 → 4.0\(2f\)
CVE-2019-1896US	high7.2	1.82% (79th)	—	4.0\(2f\)	2019-08-21	4 versions
CVE-2019-1863US	high8.1	1.70% (77th)	—	4.0\(4b\)	2019-08-21	6 versions
CVE-2019-1907US	high8.8	1.37% (72nd)	—	4.0\(2f\)	2019-08-21	2 versions
CVE-2018-0149US	medium4.8	1.23% (69th)	—	no fix	2018-06-07	2 versions
CVE-2018-15404US	medium6.5	1.07% (65th)	—	no fix	2018-10-05	= 2.1(0.0)
CVE-2017-6617US	medium5.4	0.97% (62nd)	—	no fix	2017-04-20	= 3.0(1c)
CVE-2017-6618US	medium5.4	0.93% (60th)	—	no fix	2017-04-20	= 3.0(1c)
CVE-2020-3329US	medium4.3	0.68% (52nd)	—	2.2.1.3	2020-05-06	1.1.0.0 → 2.2.1.3
CVE-2019-1883US	high7.8	0.41% (35th)	—	3.0\(4k\)	2019-08-21	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')7 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-287Improper Authentication3 CVEs
CWE-285Improper Authorization2 CVEs
CWE-399CWE-3992 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan