A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the r…

Overview

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user.

This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

Affected

• unified_computing_system = 3.1(1d)
• unified_computing_system = 3.1(2b)
• unified_computing_system = 3.1(2c)
• unified_computing_system = 3.1(2d)
• unified_computing_system = 3.1(2e)
• unified_computing_system = 3.1(2g)
• unified_computing_system = 3.1(2i)
• unified_computing_system = 3.1(3a)
• unified_computing_system = 3.1(3b)
• unified_computing_system = 3.1(3c)
• unified_computing_system = 3.1(3d)
• unified_computing_system = 3.1(3g)
• unified_computing_system = 3.1(3h)
• unified_computing_system = 3.1(3i)
• unified_computing_system = 3.1(3j)
• unified_computing_system = 3.1(3k)
• unified_computing_system = 4.0(1.240)
• unified_computing_system = 4.0(1a)
• unified_computing_system = 4.0(1b)
• unified_computing_system = 4.0(1c)
• unified_computing_system = 4.0(1d)
• unified_computing_system = 4.0(1e)
• unified_computing_system = 4.0(1g)
• unified_computing_system = 4.0(1h)
• unified_computing_system = 4.0(2c)
• unified_computing_system = 4.0(2d)
• unified_computing_system = 4.0(2f)
• unified_computing_system = 4.0(2g)
• unified_computing_system = 4.0(2h)
• unified_computing_system = 4.0(2i)
• unified_computing_system = 4.0(2k)
• unified_computing_system = 4.0(2l)
• unified_computing_system = 4.0(2m)
• unified_computing_system = 4.0(2n)
• unified_computing_system = 4.0(2o)
• unified_computing_system = 4.0(2p)
• unified_computing_system = 4.0(2q)
• unified_computing_system = 4.0(2r)
• unified_computing_system = 4.0(4b)
• unified_computing_system = 4.0(4c)
• unified_computing_system = 4.0(4d)
• unified_computing_system = 4.0(4e)
• unified_computing_system = 4.0(4f)
• unified_computing_system = 4.0(4h)
• unified_computing_system = 4.0(4i)
• unified_computing_system = 4.0(4j)
• unified_computing_system = 4.0(4k)
• unified_computing_system = 4.0(4l)
• unified_computing_system = 4.0(4m)
• unified_computing_system = 4.0(4n)
• unified_computing_system = 4.1(1c)
• unified_computing_system = 4.1(1d)
• unified_computing_system = 4.1(1f)
• unified_computing_system = 4.1(1g)
• unified_computing_system = 4.1(1h)
• unified_computing_system = 4.1(2a)
• unified_computing_system = 4.1(2b)
• unified_computing_system = 4.1(2d)
• unified_computing_system = 4.1(2e)
• unified_computing_system = 4.1(2f)
• unified_computing_system = 4.1(2g)
• unified_computing_system = 4.1(2h)
• unified_computing_system = 4.1(2j)
• unified_computing_system = 4.1(2k)
• unified_computing_system = 4.1(2l)
• unified_computing_system = 4.1(2m)
• unified_computing_system = 4.1(3b)
• unified_computing_system = 4.1(3c)
• unified_computing_system = 4.1(3d)
• unified_computing_system = 4.1(3f)
• unified_computing_system = 4.1(3g)
• unified_computing_system = 4.1(3h)
• unified_computing_system = 4.1(3i)
• unified_computing_system = 4.1(3l)
• unified_computing_system = 4.1(3m)
• unified_computing_system = 4.1(3n)
• unified_computing_system = 4.2(1a)
• unified_computing_system = 4.2(1b)
• unified_computing_system = 4.2(1c)
• unified_computing_system = 4.2(1e)
• unified_computing_system = 4.2(1f)
• unified_computing_system = 4.2(1g)
• unified_computing_system = 4.2(1i)
• unified_computing_system = 4.2(1j)
• unified_computing_system = 4.2(2a)
• unified_computing_system = 4.2(2f)
• unified_computing_system = 4.2(2g)
• unified_computing_system = 4.2(3b)
• unified_computing_system = 4.2(3d)
• unified_computing_system = 4.2(3e)
• unified_computing_system = 4.2(3g)
• unified_computing_system = 4.2(3h)
• unified_computing_system = 4.2(3i)
• unified_computing_system = 4.2(3j)
• unified_computing_system = 4.2(3k)
• unified_computing_system = 4.2(3l)
• unified_computing_system = 4.2(3m)
• unified_computing_system = 4.2(3n)
• unified_computing_system = 4.2(3o)
• unified_computing_system = 4.2(3p)

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.