جزئیات آسیب‌پذیری

CVE-2026-20094

Cisco Unified Computing SystemCisco Unified Computing System E-Series Software

Cisco Integrated Management Controller Command Injection Vulnerability

CVSS 3.1
8.8بالا

شرح رسمی (انگلیسی)

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

امتیازهای CVSS

امتیازنسخهمنبعبردار
8.8بالا 3.1 CVEProject cvelistV5 (CNA) (cisco) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Cisco Cisco Unified Computing System (Standalone) 3.1(1d) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(2b) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(2c) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(2d) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(2e) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(2g) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(2i) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(3a) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(3b) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(3c) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(3d) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(3g) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(3h) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(3i) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(3j) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 3.1(3k) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(1.240) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(1a) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(1b) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(1c) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(1d) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(1e) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(1g) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(1h) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2c) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2d) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2f) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2g) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2h) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2i) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2k) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2l) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2m) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2n) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2o) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2p) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2q) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(2r) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4b) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4c) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4d) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4e) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4f) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4h) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4i) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4j) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4k) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4l) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4m) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.0(4n) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(1c) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(1d) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(1f) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(1g) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(1h) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2a) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2b) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2d) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2e) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2f) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2g) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2h) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2j) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2k) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2l) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(2m) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(3b) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(3c) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(3d) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(3f) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(3g) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(3h) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(3i) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(3l) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(3m) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.1(3n) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(1a) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(1b) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(1c) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(1e) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(1f) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(1g) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(1i) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(1j) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(2a) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(2f) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(2g) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3b) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3d) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3e) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3g) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3h) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3i) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3j) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3k) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3l) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3m) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3n) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3o) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.2(3p) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(1.230097) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(1.230124) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(1.230138) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.230207) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.230270) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.240002) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.240009) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.240037) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.240053) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.240077) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.240090) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.240107) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.250016) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.250021) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.250022) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.250037) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.250045) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(2.250063) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(3.240022) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(3.240041) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(3.240043) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(4.240142) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(4.240152) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(4.241014) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(4.241063) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(4.242028) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(4.242038) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(4.242066) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(4.252001) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(4.252002) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(5.240021) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(5.250001) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(5.250030) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(5.250033) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(5.250043) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(5.250045) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(6.250039) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(6.250040) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(6.250044) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(6.250053) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(6.250060) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(6.250101) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(6.250117) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 4.3(6.260003) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 6.0(1.250127) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 6.0(1.250130) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 6.0(1.250131) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 6.0(1.250174) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 6.0(1.250192) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System (Standalone) 6.0(1.250194) CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.0.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.1.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.2.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.2.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.3.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.3.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.3.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.3.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.4.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.4.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 2.4.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.0.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.0.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.1.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.1.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.1.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.1.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.1.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.1.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.10 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.11.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.11.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.11.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.12.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.13.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.14 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.15 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.15.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.16.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 3.2.8 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 4.00 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 4.02 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 4.11.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 4.12.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 4.12.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Unified Computing System E-Series Software (UCSE) 4.15.2 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۵/۰۱/۱۲
آخرین به‌روزرسانی
۱۴۰۵/۰۲/۰۲
وضعیت
منتشرشده
صادرکننده (CNA)
cisco

پیش‌بینی بهره‌برداری (EPSS)

۱٫۱۳٪
احتمال بهره‌برداری در ۳۰ روز
۶۶٫۷٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-77
    Improper Neutralization of Special Elements used in a Command ('Command Injection')