cisco-sa-imc-gui-dos-TZjrFyZh: Cisco Integrated Management Controller GUI Denial of Service Vulnerability
First published: Wed Oct 20 2021(Updated: )
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause the interface to restart, resulting in a denial of service (DoS) condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imc-gui-dos-TZjrFyZh
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco UCS C-Series Rack Servers | =4.2<4.2(1b)=4.1 and earlier<4.1(2g) | 4.2(1b) 4.1(2g) |
| Cisco UCS S-Series Storage Servers | =4.1 and earlier<4.1(3e)1 | 4.1(3e)1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-imc-gui-dos-TZjrFyZh?
The severity of cisco-sa-imc-gui-dos-TZjrFyZh is critical due to its potential to allow unauthenticated remote attackers to disrupt the management interface.
How do I fix cisco-sa-imc-gui-dos-TZjrFyZh?
To fix cisco-sa-imc-gui-dos-TZjrFyZh, upgrade to the patched versions of Cisco UCS C-Series and S-Series software as specified in the advisory.
Which products are affected by cisco-sa-imc-gui-dos-TZjrFyZh?
The affected products include Cisco UCS C-Series Rack Servers and Cisco UCS S-Series Storage Servers running specific versions of the software.
What are the consequences of the cisco-sa-imc-gui-dos-TZjrFyZh vulnerability?
The consequences of the cisco-sa-imc-gui-dos-TZjrFyZh vulnerability include the potential for the web management interface to restart unexpectedly, impacting server management.
Is the cisco-sa-imc-gui-dos-TZjrFyZh vulnerability exploitable without authentication?
Yes, the cisco-sa-imc-gui-dos-TZjrFyZh vulnerability can be exploited by unauthenticated remote attackers.
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/severity
- agent/references
- agent/title
- agent/weakness
- agent/tags
- agent/description
- agent/event
- agent/source
- vendor/cisco
- canonical/cisco ucs c-series rack servers
- version/cisco ucs c-series rack servers/4.2
- version/cisco ucs c-series rack servers/4.1 and earlier
- canonical/cisco ucs s-series storage servers
- version/cisco ucs s-series storage servers/4.1 and earlier