CVE-2014-3348: Cisco Integrated Management Controller

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.

Affected products

• Cisco Integrated Management Controller: up to and including 2.2.2
• Cisco Unified Computing System e140d
• Cisco Unified Computing System e140dp
• Cisco Unified Computing System e140s m1
• Cisco Unified Computing System e140s m2
• Cisco Unified Computing System e160d
• Cisco Unified Computing System e160dp
• Cisco Unified Computing System EN120S m2

Published 2014-09-10. Last modified 2026-06-17.