Cisco Integrated Management Controller Supervisor vulnerabilities

27 CVEs affecting Cisco Integrated Management Controller Supervisor, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-44228, published 2021-12-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44228: Apache Log4j2 Remote Code Execution Vulnerability, published 2021-12-10. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2021-12-10. EPSS: 100% chance of exploitation in the next 30 days. Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker…
CVE-2019-1935, published 2019-08-21. Critical severity, CVSS 9.8. EPSS: 83.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in…
CVE-2019-1937, published 2019-08-21. Critical severity, CVSS 9.8. EPSS: 75.9% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an…
CVE-2019-1936, published 2019-08-21. High severity, CVSS 7.2. EPSS: 39.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an…
CVE-2019-1974, published 2019-08-21. Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an…
CVE-2017-6616, published 2017-04-20. High severity, CVSS 8.8. EPSS: 4.2% chance of exploitation in the next 30 days. A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticated, remote attacker to execute arbitrary code on an affected system. The…
CVE-2019-1885, published 2019-08-21. High severity, CVSS 7.2. EPSS: 3.8% chance of exploitation in the next 30 days. A vulnerability in the Redfish protocol of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on…
CVE-2019-1865, published 2019-08-21. High severity, CVSS 8.8. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary commands that are…
CVE-2019-1850, published 2019-08-21. High severity, CVSS 7.2. EPSS: 3.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary commands that are…
CVE-2019-1871, published 2019-08-21. High severity, CVSS 7.2. EPSS: 3.3% chance of exploitation in the next 30 days. A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to cause a denial of service (DoS)…

Latest

CVE-2020-3329, published 2020-05-06. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in role-based access control of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow a read-only…
CVE-2019-1908, published 2019-08-21. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to view…
CVE-2019-1907, published 2019-08-21. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to set sensitive configuration values and gain elevated privileges. The…
CVE-2019-1900, published 2019-08-21. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web server process to crash, causing a denial of service…
CVE-2019-1896, published 2019-08-21. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands and obtain root…