漏洞信息详情
Cisco Integrated Management Controller 输入验证错误漏洞
漏洞简介
Cisco Integrated Management Controller(IMC)是美国思科(Cisco)公司的一套用于对UCS(统一计算系统)进行管理的软件。该软件支持HTTP、SSH访问等,并可对服务器进行开机、关机和重启等操作。
Cisco Integrated Management Controller (IMC) 存在输入验证错误漏洞,该漏洞源于web管理界面的输入验证不足造成的。攻击者可利用该漏洞重新启动接口,从而导致拒绝服务(DoS)状态。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,详情请关注厂商主页:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imc-gui-dos-TZjrFyZh
参考网址
来源:CISCO
链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imc-gui-dos-TZjrFyZh
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2021-34736
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3500
来源:tools.cisco.com
链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imc-gui-dos-TZjrFyZh
来源:www.cybersecurity-help.cz
链接:https://www.cybersecurity-help.cz/vdb/SB2021102135
受影响实体
暂无
补丁
- Cisco Integrated Management Controller 输入验证错误漏洞的修复措施<!--2021-10-20-->
还没有评论,来说两句吧...