Логотип exploitDog
bind:CVE-2024-20356
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-20356

Количество 3

Количество 3

nvd логотип

CVE-2024-20356

почти 2 года назад

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root.

CVSS3: 8.7
EPSS: Средний
github логотип

GHSA-m2xm-r93v-mjrm

почти 2 года назад

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root.

CVSS3: 8.7
EPSS: Средний
fstec логотип

BDU:2024-03308

почти 2 года назад

Уязвимость веб-интерфейса управления средства удалённого администрирования серверов Cisco Integrated Management Controller (IMC), позволяющая нарушителю повысить свои привилегии до уровня root

CVSS3: 8.7
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-20356

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root.

CVSS3: 8.7
34%
Средний
почти 2 года назад
github логотип
GHSA-m2xm-r93v-mjrm

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root.

CVSS3: 8.7
34%
Средний
почти 2 года назад
fstec логотип
BDU:2024-03308

Уязвимость веб-интерфейса управления средства удалённого администрирования серверов Cisco Integrated Management Controller (IMC), позволяющая нарушителю повысить свои привилегии до уровня root

CVSS3: 8.7
34%
Средний
почти 2 года назад

Уязвимостей на страницу