CVE-2020-3470: Cisco Integrated Management Controller Multiple Remote Code Execution Vulnerabilities
First published: Wed Nov 18 2020(Updated: )
Multiple vulnerabilities in the API subsystem of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. The vulnerabilities are due to improper boundary checks for certain user-supplied input. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the API subsystem of an affected system. When this request is processed, an exploitable buffer overflow condition may occur. A successful exploit could allow the attacker to execute arbitrary code with root privileges on the underlying operating system (OS).
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Enterprise NFV Infrastructure Software | <4.4.1 | |
| Cisco Enterprise Network Compute System 5100 | ||
| Cisco Enterprise Network Compute System 5400 | ||
| Cisco Integrated Management Controller | >=4.0\(1a\)<=4.0\(4l\) | |
| Cisco C125 M5 | ||
| Cisco C220 M5 | ||
| Cisco C240 M5 | ||
| Cisco C480 M5 | ||
| Cisco C480 Ml M5 | ||
| Cisco Integrated Management Controller | >=3.0\(1c\)<=3.0\(4q\) | |
| Cisco Integrated Management Controller | >=4.0\(1a\)<=4.0\(2l\) | |
| Cisco Integrated Management Controller | >=4.1\(1c\)<=4.1\(1f\) | |
| Cisco Ucs C220 M4 | ||
| Cisco Ucs C460 M4 | ||
| Cisco Ucs C22 M3 | ||
| Cisco Ucs C220 M3 | ||
| Cisco Ucs C24 M3 | ||
| Cisco Ucs C240 M3 | ||
| Cisco Ucs C420 M3 | ||
| Cisco Integrated Management Controller | <3.2.11.3 | |
| Cisco Ucs E-series M1 | ||
| Cisco Ucs E-series M2 | ||
| Cisco Ucs E-series M3 | ||
| Cisco Integrated Management Controller | >=3.1<=4.0\(4l\) | |
| Cisco Ucs S3260 | ||
| Cisco Ucs S3160 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-3470?
CVE-2020-3470 is a vulnerability in the API subsystem of Cisco Integrated Management Controller (IMC) that could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges.
What is the severity of CVE-2020-3470?
The severity of CVE-2020-3470 is critical, with a CVSS score of 9.8.
How can an attacker exploit CVE-2020-3470?
An attacker can exploit CVE-2020-3470 by sending malicious input to the API subsystem of Cisco IMC.
Which versions of Cisco IMC are affected by CVE-2020-3470?
Versions 3.0(1c) to 3.0(4q), 4.0(1a) to 4.0(4l), and 4.1(1c) to 4.1(1f) of Cisco IMC are affected by CVE-2020-3470.
How can I fix CVE-2020-3470?
To fix CVE-2020-3470, update Cisco IMC to a version that is not affected by the vulnerability.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/title
- agent/author
- agent/references
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/cisco
- canonical/cisco enterprise nfv infrastructure software
- canonical/cisco enterprise network compute system 5100
- canonical/cisco enterprise network compute system 5400
- canonical/cisco integrated management controller
- version/cisco integrated management controller/4.0\(1a\)
- version/cisco integrated management controller/4.0\(4l\)
- canonical/cisco c125 m5
- canonical/cisco c220 m5
- canonical/cisco c240 m5
- canonical/cisco c480 m5
- canonical/cisco c480 ml m5
- version/cisco integrated management controller/3.0\(1c\)
- version/cisco integrated management controller/3.0\(4q\)
- version/cisco integrated management controller/4.0\(2l\)
- version/cisco integrated management controller/4.1\(1c\)
- version/cisco integrated management controller/4.1\(1f\)
- canonical/cisco ucs c220 m4
- canonical/cisco ucs c460 m4
- canonical/cisco ucs c22 m3
- canonical/cisco ucs c220 m3
- canonical/cisco ucs c24 m3
- canonical/cisco ucs c240 m3
- canonical/cisco ucs c420 m3
- canonical/cisco ucs e-series m1
- canonical/cisco ucs e-series m2
- canonical/cisco ucs e-series m3
- version/cisco integrated management controller/3.1
- canonical/cisco ucs s3260
- canonical/cisco ucs s3160