Cisco Integrated Management Controller vulnerabilities

12 CVEs affecting Cisco Integrated Management Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1397, published 2021-05-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3470, published 2020-11-18. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The…
CVE-2014-3348, published 2014-09-10. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang)…
CVE-2019-1631, published 2019-06-20. Medium severity, CVSS 5.3. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially sensitive system usage…
CVE-2020-3371, published 2020-11-06. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary code and execute arbitrary commands at the underlying…
CVE-2018-15447, published 2018-11-08. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the web framework code of Cisco Integrated Management Controller (IMC) Supervisor could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The…
CVE-2019-1629, published 2019-06-20. Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to…
CVE-2019-1627, published 2019-06-20. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to gain unauthorized access to sensitive user information from…
CVE-2021-1397, published 2021-05-06. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web…
CVE-2019-1632, published 2019-06-20. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF)…
CVE-2019-1879, published 2019-06-20. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The…

Latest

CVE-2019-1630, published 2019-06-20. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a…
CVE-2019-1628, published 2019-06-20. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS)…