CVE-2026-20200: falha de alta gravidade em Cisco Unified Computing System (Standalone)
Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
41Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 8.8epss 0.7%
da publicação à armano mesmo dia
Publicada no NVD5 de ago.
1ª PoC21 de jul.
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.
This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Unified Computing System (Standalone)PoCs públicas encontradas — 1
githubgithub.com/NSIDE-ATTACK-LOGIC/CIMCown★ 1⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Cisco Unified Computing System (Standalone)
No mesmo produto, das mais perigosas para as menos.
CVE-2024-20356HIGHCVE-2024-20356EPSS 29.6%CVE-2020-3470CRITICALCisco Integrated Management Controller Multiple Remote Code Execution VulnerabilitiesEPSS 4.8%CVE-2020-3371MEDIUMCisco Integrated Management Controller Command Injection VulnerabilityEPSS 1.9%CVE-2024-20295HIGHCVE-2024-20295EPSS 1.6%CVE-2026-20094HIGHCisco Integrated Management Controller Command Injection VulnerabilityEPSS 1.1%CVE-2026-20093CRITICALCisco Integrated Management Controller Authentication Bypass VulnerabilityEPSS 1.0%