CVE-2026-20094: fallo de gravedad alta en Cisco Unified Computing System E-Series…
Cisco Integrated Management Controller Command Injection Vulnerability
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear Cisco Unified Computing System+ Monitorear Cisco Unified Computing System E-Series
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.8epss 1.1%
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user.
This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Cisco · Cisco Unified Computing System E-Series Software (UCSE)Cisco · Cisco Unified Computing System (Standalone)CVEs relacionadas — Cisco Unified Computing System E-Series…
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-20356HIGHCVE-2024-20356EPSS 29.6%CVE-2020-3470CRITICALCisco Integrated Management Controller Multiple Remote Code Execution VulnerabilitiesEPSS 4.8%CVE-2018-0431—Cisco Integrated Management Controller Command Injection VulnerabilityEPSS 4.0%CVE-2018-0430—Cisco Integrated Management Controller Command Injection VulnerabilityEPSS 4.0%CVE-2019-1865HIGHCisco Integrated Management Controller Command Injection VulnerabilityEPSS 3.6%CVE-2019-1850HIGHCisco Integrated Management Controller Command Injection VulnerabilityEPSS 3.5%