Cisco
Cisco Integrated Management Controller: vulnerabilidades y CVE
Cisco Integrated Management Controller tiene 20 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE20
Últimos 12 meses2
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20198 | Media (4.8) | 0.29% | — | 5 ago 2026 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the… |
| CVE-2026-20093 | Crítica (9.8) | 0.99% | — | 1 abr 2026 | A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system as Admin.… |
| CVE-2025-20342 | Media (5.4) | 0.22% | — | 27 ago 2025 | A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with low privileges to conduct a stored… |
| CVE-2025-20317 | Alta (7.1) | 0.43% | — | 27 ago 2025 | A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website.… |
| CVE-2025-20261 | Alta (8.8) | 0.46% | — | 4 jun 2025 | A vulnerability in the SSH connection handling of Cisco Integrated Management Controller (IMC) for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker… |
| CVE-2020-26063 | Media (5.4) | 0.62% | — | 18 nov 2024 | A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system without authorization.… |
| CVE-2024-20356 | Alta (8.7) | 33% | — | 24 abr 2024 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection… |
| CVE-2024-20295 | Alta (8.8) | 1.2% | — | 24 abr 2024 | A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges… |
| CVE-2021-1397 | Media (6.1) | 0.83% | — | 6 may 2021 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This… |
| CVE-2020-3470 | Crítica (9.8) | 4.8% | — | 18 nov 2020 | Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due… |
| CVE-2020-3371 | Alta (8.8) | 1.9% | — | 6 nov 2020 | A vulnerability in the web UI of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary code and execute arbitrary commands at the underlying operating system… |
| CVE-2019-1879 | Media (6.7) | 0.42% | — | 20 jun 2019 | A vulnerability in the CLI of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to… |
| CVE-2019-1632 | Alta (8) | 0.55% | — | 20 jun 2019 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform… |
| CVE-2019-1631 | Media (5.3) | 2.2% | — | 20 jun 2019 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to access potentially sensitive system usage information. The… |
| CVE-2019-1630 | Media (5.5) | 0.35% | — | 20 jun 2019 | A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS)… |
| CVE-2019-1629 | Media (5.3) | 1.5% | — | 20 jun 2019 | A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The… |
| CVE-2019-1628 | Media (5.5) | 0.39% | — | 20 jun 2019 | A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition on an affected… |
| CVE-2019-1627 | Media (6.5) | 1.2% | — | 20 jun 2019 | A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to gain unauthorized access to sensitive user information from the configuration data… |
| CVE-2018-15447 | Crítica (9.8) | 1.7% | — | 8 nov 2018 | A vulnerability in the web framework code of Cisco Integrated Management Controller (IMC) Supervisor could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack… |
| CVE-2014-3348 | Media (5) | 2.6% | — | 10 sept 2014 | The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.