Improper input validation in Cisco Integrated Management Controller
CVE-2014-3348
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.026 (84.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Integrated_management_controller
- Cisco Unified_computing_system_e140d
- Cisco Unified_computing_system_e140dp
- Cisco Unified_computing_system_e140s_m1
- Cisco Unified_computing_system_e140s_m2
- Cisco Unified_computing_system_e160d
- Cisco Unified_computing_system_e160dp
- Cisco Unified_computing_system_en120s_m2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_XF)