Product by Cisco
Cisco Integrated Management Controller
27 known vulnerabilities in Cisco Integrated Management Controller (Cisco), 1 of them actively exploited (CISA KEV).
Key figures
27
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-44228 | Apache Log4j2 Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 75 other products | 10.0 | |
| Critical | CVE-2019-1935 | Cisco Unified Computing System Director: Use of Hard-coded Credentials | 9.8 | |
| Critical | CVE-2019-1937 | Cisco Unified Computing System Director: Improper Authentication | 9.8 | |
| Critical | CVE-2019-1974 | Cisco Unified Computing System Director: Improper Authentication | 9.8 | |
| High | CVE-2019-1936 | Cisco Unified Computing System Director: Improper Input Validation | 7.2 | |
| High | CVE-2017-6616 | Cisco Integrated Management Controller: Improper Input Validation | 8.8 | |
| High | CVE-2019-1865 | Cisco Integrated Management Controller Command Injection Vulnerability | 8.8 | |
| High | CVE-2017-6619 | Cisco Integrated Management Controller: Improper Input Validation | 8.8 | |
| High | CVE-2019-1864 | Cisco Integrated Management Controller Command Injection Vulnerability | 8.8 | |
| High | CVE-2019-1885 | Cisco Integrated Management Controller Command Injection Vulnerability | 7.2 | |
| High | CVE-2019-1850 | Cisco Integrated Management Controller Command Injection Vulnerability | 7.2 | |
| High | CVE-2019-1871 | Cisco Integrated Management Controller Buffer Overflow Vulnerability | 7.2 | |
| High | CVE-2019-1634 | Cisco Integrated Management Controller Command Injection Vulnerability | 7.2 | |
| High | CVE-2019-12634 | Cisco Unified Computing System Director: Permissions, Privileges, and Access Controls | 8.6 | |
| High | CVE-2019-1908 | Cisco Integrated Management Controller Information Disclosure Vulnerability | 7.5 | |
| High | CVE-2019-1900 | Cisco Integrated Management Controller Unauthenticated Denial of Service Vulnerability | 7.5 | |
| High | CVE-2019-1896 | Cisco Integrated Management Controller CSR Generation Command Injection Vulnerability | 7.2 | |
| High | CVE-2019-1907 | Cisco Integrated Management Controller Substring Comparison Privilege Escalation Vulnerability | 8.8 | |
| High | CVE-2019-1863 | Cisco Integrated Management Controller Privilege Escalation Vulnerability | 6.5 | |
| Medium | CVE-2018-15404 | Cisco Integrated Management Controller Supervisor: Resource Management Errors | 6.5 | |
| Medium | CVE-2018-0149 | Cisco Integrated Management Controller Supervisor: Cross-site Scripting | 4.8 | |
| Not rated | CVE-2015-6259 | Cisco Unified Computing System (UCS) Director 6.5(0.0): security vulnerability | — | |
| Medium | CVE-2017-6617 | Cisco Integrated Management Controller: Improper Authentication | 5.4 | |
| Medium | CVE-2017-6618 | Cisco Integrated Management Controller: Cross-site Scripting | 5.4 | |
| Not rated | CVE-2015-6399 | Cisco Integrated Management Controller Supervisor: Denial of Service | — |
News
- There's only so much code: the rise in vulnerability numberscisco-talos,
- SSA-397453 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUSsiemens-productcert
- SSA-714170 V1.0: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000siemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert