CVE-2017-6604

Опубликовано: 07 апр. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified Computing System (UCS) B-Series M3 and M4 Blade Servers, Unified Computing System (UCS) C-Series M3 and M4 Rack Servers. More Information: CSCvc37931. Known Affected Releases: 3.1(2c)B.

Ссылки

http://www.securityfocus.com/bid/97457
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038186
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cimc
Vendor Advisory
http://www.securityfocus.com/bid/97457
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038186
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cimc
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:unified_computing_system:2.2\(8b\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system:3.0\(1c\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:unified_computing_system:3.1\(2c\)b:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00255

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

GHSA-gh63-grcf-3799

CVSS3: 6.1

github

больше 3 лет назад

BDU:2017-00944

fstec

почти 9 лет назад

Уязвимость системы централизованного управления устройствами Cisco Unified Computing System Central, позволяющая нарушителю перенаправить пользователей на вредоносную веб-страницу