What it is about

Der Cisco Integrated Management Controller ist eine Serververwaltung für mehrere Cisco-Produkte. Ein Angreifer kann mehrere Schwachstellen in Cisco Integrated Management Controller ausnutzen, um Administratorrechte zu erlangen, beliebigen Code mit Root-Rechten auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.

Under what conditions?

The BSI does not name any particular preconditions. Exploitable remotely according to the BSI.

What can happen in the worst case

An attacker could use the vulnerability to

• Administratorrechte zu erlangen
• beliebigen Code mit Root-Rechten auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen

Am I affected?

Affected according to the BSI:

• Cisco Integrated Management Controller UCS C-Series M5 Rack ServerIMC <4.3(2.260007)
• Cisco Integrated Management Controller UCS C-Series M6 Rack Server IMC <4.3(2.260007)
• Cisco Integrated Management Controller UCS C-Series M6 Rack Server IMC <6.0(1.250174)
• Cisco Integrated Management Controller UCS E-Series M3 IMC <3.2.17
• Cisco Integrated Management Controller UCS E-Series M6 IMC <4.15.3
• Cisco Integrated Management Controller Hardware Platform
• Cisco Integrated Management Controller 5000 Series ENCS NFVIS <4.15.5
• Cisco Integrated Management Controller Catalyst 8300 Series Edge uCPE NFVIS <4.18.3
• Cisco Integrated Management Controller UCS C-Series M6 Rack Server IMC <6.0(2.260044)
• Cisco Integrated Management Controller UCS S-Series Storage Server IMC <4.3(6.260017)

The installed version is usually shown under “Help → About” or in the device’s admin interface.

What helps?

Update to at least:

• Cisco Integrated Management Controller UCS C-Series M5 Rack ServerIMC 4.3(2.260007)
• Cisco Integrated Management Controller UCS C-Series M6 Rack Server IMC 4.3(2.260007)
• Cisco Integrated Management Controller UCS C-Series M6 Rack Server IMC 6.0(1.250174)
• Cisco Integrated Management Controller UCS E-Series M3 IMC 3.2.17
• Cisco Integrated Management Controller UCS E-Series M6 IMC 4.15.3
• Cisco Integrated Management Controller 5000 Series ENCS NFVIS 4.15.5
• Cisco Integrated Management Controller Catalyst 8300 Series Edge uCPE NFVIS 4.18.3
• Cisco Integrated Management Controller UCS C-Series M6 Rack Server IMC 6.0(2.260044)
• Cisco Integrated Management Controller UCS S-Series Storage Server IMC 4.3(6.260017)

Is the vulnerability already being exploited?

None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.