A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause the interface to restart, resulting in a denial of service (DoS) condition.
2021-10-21T03:15:06.890
2024-11-21T06:11:04.973
Modified
CVSSv3.1: 5.3 (MEDIUM)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | cisco | unified_computing_system | < 4.1\(2g\) | Yes |
| Application | cisco | unified_computing_system | < 4.2\(1b\) | Yes |
| Hardware | cisco | ucs_c125_m5 | - | No |
| Hardware | cisco | ucs_c22_m3 | - | No |
| Hardware | cisco | ucs_c220_m3 | - | No |
| Hardware | cisco | ucs_c220_m4 | - | No |
| Hardware | cisco | ucs_c220_m5 | - | No |
| Hardware | cisco | ucs_c225_m6 | - | No |
| Hardware | cisco | ucs_c24_m3 | - | No |
| Hardware | cisco | ucs_c240_m3 | - | No |
| Hardware | cisco | ucs_c240_m5 | - | No |
| Hardware | cisco | ucs_c240_sd_m5 | - | No |
| Hardware | cisco | ucs_c245_m6 | - | No |
| Hardware | cisco | ucs_c260_m2 | - | No |
| Hardware | cisco | ucs_c3160 | - | No |
| Hardware | cisco | ucs_c3260 | - | No |
| Hardware | cisco | ucs_c420_m3 | - | No |
| Hardware | cisco | ucs_c4200 | - | No |
| Hardware | cisco | ucs_c460_m2 | - | No |
| Hardware | cisco | ucs_c460_m4 | - | No |
| Hardware | cisco | ucs_c480_m5 | - | No |
| Hardware | cisco | ucs_c480_ml_m5 | - | No |
| Hardware | cisco | ucs_c890_m5 | - | No |
| Application | cisco | unified_computing_system | < 4.1\(3e\) | Yes |
| Hardware | cisco | ucs_s3260 | - | No |