6.5Orta
CVE-2026-20096Cisco Integrated Management Controller Command Injection Vulnerability
Açıklama
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user. Cisco has assigned this vulnerability a Security Impact Rating (SIR) of High, rather than Medium as the score indicates, because additional security implications could occur once the attacker has become root.
Zayıflık türü (CWE):
CWE-77
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Cisco | Cisco Enterprise NFV Infrastructure Software | 4.1.1, 3.9.1, 3.5.2, 3.12.2, 3.6.2, 3.9.2, 3.11.3, 3.11.1, 3.5.1, 3.3.1, 3.10.2, 3.12.1b, 3.4.1, 3.12.1a, 3.6.3, 3.8.1, 3.11.2, 3.12.1, 3.12.3, 3.10.1, 3.6.1, 3.10.3, 3.7.1, 4.1.2, 4.2.1, 4.2.2, 4.4.1, 4.4.2, 4.5.1, 4.4.3, 4.6.1, 4.7.1, 4.6.2-FC2, 4.6.2-FC3, 4.6.2, 4.8.1, 4.8.2, 4.9.1, 4.6.3, 4.9.2-FC5, 4.9.2, 4.10.1, 4.9.3, 4.11.1, 4.9.4, 4.12.1, 4.6.4, 4.12.2, 4.13.1, 4.9.4-ES8, 4.9.5, 4.12.3, 4.6.5-ES1, 4.9.4-ES9, 4.14.1, 4.6.3-FC4, 4.9.4-FC3, 4.12.4, 4.15.1, 4.9.6, 4.16.1, 4.15.2, 4.12.5, 4.15.3, 4.15.4, 4.18.1, 4.12.6, 4.18.2, 4.18.2a | |
| Cisco | Cisco Unified Computing System E-Series Software (UCSE) | 3.2.7, 3.2.6, 3.2.4, 3.2.10, 3.2.2, 3.2.3, 2.4.0, 3.2.1, 3.2.11.1, 3.2.8, 3.1.1, 3.0.2, 2.1.0, 2.2.2, 3.1.2, 3.0.1, 2.3.2, 2.3.5, 2.2.1, 3.1.4, 2.4.1, 2.3.1, 3.1.3, 2.3.3, 2.4.2, 3.1.5, 3.1.0, 2.0.0, 3.2.11.3, 3.2.11.5, 3.2.12.2, 3.2.13.6, 3.2.14, 4.11.1, 3.2.15, 4.12.1, 3.2.15.3, 4.12.2, 3.2.16.1, 4.00, 4.15.2, 4.02 | |
| Cisco | Cisco Unified Computing System (Standalone) | 4.0(2g), 3.1(2i), 3.1(1d), 4.0(4i), 4.1(1c), 4.0(2c), 4.0(1e), 4.0(2h), 4.0(4h), 4.0(1h), 4.0(2l), 3.1(3g), 4.0(1.240), 4.0(2f), 4.0(1g), 4.0(2i), 3.1(3i), 4.0(4d), 4.1(1d), 3.1(3c), 4.0(4k), 3.1(2d), 3.1(3a), 3.1(3j), 4.0(2d), 4.1(1f), 4.0(4j), 4.0(2m), 4.0(2k), 4.0(1c), 4.0(4f), 4.0(4c), 3.1(3d), 3.1(2g), 3.1(2c), 4.0(1d), 3.1(2e), 4.0(1a), 4.0(1b), 3.1(3b), 4.0(4b), 3.1(2b), 4.0(4e), 3.1(3h), 4.0(4l), 4.1(1g), 4.1(2a), 4.0(2n), 4.1(1h), 3.1(3k), 4.1(2b), 4.0(2o), 4.0(4m), 4.1(2d), 4.1(3b), 4.0(2p), 4.1(2e), 4.1(2f), 4.0(4n), 4.0(2q), 4.1(3c), 4.0(2r), 4.1(3d), 4.1(2g), 4.1(2h), 4.1(3g), 4.1 | |
| cisco | enterprise nfv infrastructure software | 3.3.1 | |
| cisco | unified computing system | 3.1(1d) | |
| cisco | unified computing system e-series software | 2.0.0 |
Kaynaklar ve yamalar
- cisco-sa-cimc-cmd-inj-3hKN3bVt Vendor Advisory
CPE eşleşmeleri (NVD) (60)
cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.3.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.4.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.5.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.5.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.6.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.6.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.6.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.7.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.8.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.9.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.9.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.10.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.10.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.10.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.11.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.11.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.11.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.1a:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.1b:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.1.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.1.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.2.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.2.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.4.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.4.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.4.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.5.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.2-fc2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.2-fc3:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.3-fc4:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.4:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.5-es1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.7.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.8.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.8.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.2-fc5:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4-es8:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4-es9:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4-fc3:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.5:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.6:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.10.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.11.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.1:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.2:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.3:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.4:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.5:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.6:*:*:*:*:*:*:*cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.13.1:*:*:*:*:*:*:*