Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xq7x-x23m-gmh8

Опубликовано: 05 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. 

This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user. 

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. 

This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user. 

EPSS

Процентиль: 55%
0.00843
Низкий

8.8 High

CVSS3

Дефекты

CWE-141

Связанные уязвимости

CVSS3: 8.8
nvd
5 дней назад

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.  This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user. 

CVSS3: 8.8
fstec
5 дней назад

Уязвимость веб-интерфейса управления средства удалённого администрирования серверов Cisco Integrated Management Controller (IMC), позволяющая нарушителю выполнить произвольные команды и повысить свои привилегии

EPSS

Процентиль: 55%
0.00843
Низкий

8.8 High

CVSS3

Дефекты

CWE-141