جزئیات آسیب‌پذیری
CVE-2026-20200
Cisco Unified Computing System
Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability
CVSS 3.1
8.8بالا
شرح رسمی (انگلیسی)
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(1.230097) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(1.230124) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(1.230138) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(2.230207) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(2.230270) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(2.240002) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(3.240022) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(3.240043) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(4.240142) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(4.240152) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(4.241014) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(4.241063) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(4.242028) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(4.242038) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(4.242066) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(4.252001) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(4.252002) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(5.240021) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(5.250001) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(5.250030) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(5.250033) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(5.250043) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(5.250045) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(6.250039) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(6.250040) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(6.250044) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(6.250053) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(6.250060) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(6.250101) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(6.250117) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(6.260003) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 4.3(6.260017) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 6.0(1.250127) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 6.0(1.250130) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 6.0(1.250131) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 6.0(1.250174) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 6.0(1.250192) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Unified Computing System (Standalone) | 6.0(1.250194) | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۵/۱۴
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۵
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیش‌بینی بهره‌برداری (EPSS)
۰٫۷۳٪
احتمال بهره‌برداری در ۳۰ روز
۵۴٫۵٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-141Improper Neutralization of Parameter/Argument Delimiters