CVE-2026-20097 (GCVE-0-2026-20097)
Vulnerability from cvelistv5 – Published: 2026-04-01 16:29 – Updated: 2026-04-22 19:09
VLAI
EPSS
VEX
Title
Cisco Integrated Management Controller Remote Code Execution Vulnerability
Summary
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user.
Cisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-04-01 00:00 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Cisco | Cisco Unified Computing System (Standalone) |
Affected:
4.0(2g)
Affected: 3.1(2i) Affected: 3.1(1d) Affected: 4.0(4i) Affected: 4.1(1c) Affected: 4.0(2c) Affected: 4.0(1e) Affected: 4.0(2h) Affected: 4.0(4h) Affected: 4.0(1h) Affected: 4.0(2l) Affected: 3.1(3g) Affected: 4.0(1.240) Affected: 4.0(2f) Affected: 4.0(1g) Affected: 4.0(2i) Affected: 3.1(3i) Affected: 4.0(4d) Affected: 4.1(1d) Affected: 3.1(3c) Affected: 4.0(4k) Affected: 3.1(2d) Affected: 3.1(3a) Affected: 3.1(3j) Affected: 4.0(2d) Affected: 4.1(1f) Affected: 4.0(1c) Affected: 4.0(4f) Affected: 4.0(4c) Affected: 3.1(3d) Affected: 3.1(2g) Affected: 3.1(2c) Affected: 4.0(1d) Affected: 3.1(2e) Affected: 4.0(1a) Affected: 4.0(1b) Affected: 3.1(3b) Affected: 4.0(4b) Affected: 3.1(2b) Affected: 4.0(4e) Affected: 3.1(3h) Affected: 4.0(4l) Affected: 4.1(1g) Affected: 4.1(2a) Affected: 4.0(2n) Affected: 4.1(1h) Affected: 3.1(3k) Affected: 4.1(2b) Affected: 4.0(2o) Affected: 4.0(4m) Affected: 4.1(2d) Affected: 4.1(3b) Affected: 4.0(2p) Affected: 4.1(2e) Affected: 4.1(2f) Affected: 4.0(4n) Affected: 4.0(2q) Affected: 4.1(3c) Affected: 4.0(2r) Affected: 4.1(3d) Affected: 4.1(2g) Affected: 4.1(2h) Affected: 4.1(3f) Affected: 4.1(2j) Affected: 4.1(2k) Affected: 4.1(3h) Affected: 4.2(2a) Affected: 4.1(3i) Affected: 4.2(2f) Affected: 4.2(2g) Affected: 4.2(3b) Affected: 4.1(3l) Affected: 4.2(3d) Affected: 4.3(1.230097) Affected: 4.2(1e) Affected: 4.2(1b) Affected: 4.2(1j) Affected: 4.2(1i) Affected: 4.2(1f) Affected: 4.2(1a) Affected: 4.2(1c) Affected: 4.2(1g) Affected: 4.3(1.230124) Affected: 4.1(2l) Affected: 4.2(3e) Affected: 4.3(1.230138) Affected: 4.2(3g) Affected: 4.3(2.230207) Affected: 4.2(3h) Affected: 4.2(3i) Affected: 4.3(2.230270) Affected: 4.1(3m) Affected: 4.1(2m) Affected: 4.3(2.240002) Affected: 4.3(3.240022) Affected: 4.2(3j) Affected: 4.1(3n) Affected: 4.3(2.240009) Affected: 4.3(3.240043) Affected: 4.3(4.240142) Affected: 4.3(2.240037) Affected: 4.3(2.240053) Affected: 4.3(4.240152) Affected: 4.2(3l) Affected: 4.3(2.240077) Affected: 4.3(4.242028) Affected: 4.3(4.241063) Affected: 4.3(4.242038) Affected: 4.2(3m) Affected: 4.3(2.240090) Affected: 4.3(5.240021) Affected: 4.3(2.240107) Affected: 4.3(4.242066) Affected: 4.2(3n) Affected: 4.3(5.250001) Affected: 4.2(3o) Affected: 4.3(2.250016) Affected: 4.3(2.250021) Affected: 4.3(5.250030) Affected: 4.3(2.250022) Affected: 4.3(6.250040) Affected: 4.3(5.250033) Affected: 4.3(6.250044) Affected: 4.3(6.250053) Affected: 4.3(2.250037) Affected: 4.3(2.250045) Affected: 4.3(4.252001) Affected: 4.3(4.252002) Affected: 6.0(1.250127) Affected: 4.2(3p) Affected: 6.0(1.250131) Affected: 4.3(6.250101) Affected: 6.0(1.250174) Affected: 4.3(6.250117) Affected: 4.3(5.250043) Affected: 4.3(6.250039) Affected: 4.3(5.250045) Affected: 4.3(6.250060) Affected: 6.0(1.250130) Affected: 4.3(4.241014) Affected: 4.3(2.250063) Affected: 6.0(1.250192) Affected: 4.3(6.260003) Affected: 6.0(1.250194) |
guessed |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20097",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-01T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-02T03:56:16.248Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Unified Computing System (Standalone)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "4.0(2g)"
},
{
"status": "affected",
"version": "3.1(2i)"
},
{
"status": "affected",
"version": "3.1(1d)"
},
{
"status": "affected",
"version": "4.0(4i)"
},
{
"status": "affected",
"version": "4.1(1c)"
},
{
"status": "affected",
"version": "4.0(2c)"
},
{
"status": "affected",
"version": "4.0(1e)"
},
{
"status": "affected",
"version": "4.0(2h)"
},
{
"status": "affected",
"version": "4.0(4h)"
},
{
"status": "affected",
"version": "4.0(1h)"
},
{
"status": "affected",
"version": "4.0(2l)"
},
{
"status": "affected",
"version": "3.1(3g)"
},
{
"status": "affected",
"version": "4.0(1.240)"
},
{
"status": "affected",
"version": "4.0(2f)"
},
{
"status": "affected",
"version": "4.0(1g)"
},
{
"status": "affected",
"version": "4.0(2i)"
},
{
"status": "affected",
"version": "3.1(3i)"
},
{
"status": "affected",
"version": "4.0(4d)"
},
{
"status": "affected",
"version": "4.1(1d)"
},
{
"status": "affected",
"version": "3.1(3c)"
},
{
"status": "affected",
"version": "4.0(4k)"
},
{
"status": "affected",
"version": "3.1(2d)"
},
{
"status": "affected",
"version": "3.1(3a)"
},
{
"status": "affected",
"version": "3.1(3j)"
},
{
"status": "affected",
"version": "4.0(2d)"
},
{
"status": "affected",
"version": "4.1(1f)"
},
{
"status": "affected",
"version": "4.0(1c)"
},
{
"status": "affected",
"version": "4.0(4f)"
},
{
"status": "affected",
"version": "4.0(4c)"
},
{
"status": "affected",
"version": "3.1(3d)"
},
{
"status": "affected",
"version": "3.1(2g)"
},
{
"status": "affected",
"version": "3.1(2c)"
},
{
"status": "affected",
"version": "4.0(1d)"
},
{
"status": "affected",
"version": "3.1(2e)"
},
{
"status": "affected",
"version": "4.0(1a)"
},
{
"status": "affected",
"version": "4.0(1b)"
},
{
"status": "affected",
"version": "3.1(3b)"
},
{
"status": "affected",
"version": "4.0(4b)"
},
{
"status": "affected",
"version": "3.1(2b)"
},
{
"status": "affected",
"version": "4.0(4e)"
},
{
"status": "affected",
"version": "3.1(3h)"
},
{
"status": "affected",
"version": "4.0(4l)"
},
{
"status": "affected",
"version": "4.1(1g)"
},
{
"status": "affected",
"version": "4.1(2a)"
},
{
"status": "affected",
"version": "4.0(2n)"
},
{
"status": "affected",
"version": "4.1(1h)"
},
{
"status": "affected",
"version": "3.1(3k)"
},
{
"status": "affected",
"version": "4.1(2b)"
},
{
"status": "affected",
"version": "4.0(2o)"
},
{
"status": "affected",
"version": "4.0(4m)"
},
{
"status": "affected",
"version": "4.1(2d)"
},
{
"status": "affected",
"version": "4.1(3b)"
},
{
"status": "affected",
"version": "4.0(2p)"
},
{
"status": "affected",
"version": "4.1(2e)"
},
{
"status": "affected",
"version": "4.1(2f)"
},
{
"status": "affected",
"version": "4.0(4n)"
},
{
"status": "affected",
"version": "4.0(2q)"
},
{
"status": "affected",
"version": "4.1(3c)"
},
{
"status": "affected",
"version": "4.0(2r)"
},
{
"status": "affected",
"version": "4.1(3d)"
},
{
"status": "affected",
"version": "4.1(2g)"
},
{
"status": "affected",
"version": "4.1(2h)"
},
{
"status": "affected",
"version": "4.1(3f)"
},
{
"status": "affected",
"version": "4.1(2j)"
},
{
"status": "affected",
"version": "4.1(2k)"
},
{
"status": "affected",
"version": "4.1(3h)"
},
{
"status": "affected",
"version": "4.2(2a)"
},
{
"status": "affected",
"version": "4.1(3i)"
},
{
"status": "affected",
"version": "4.2(2f)"
},
{
"status": "affected",
"version": "4.2(2g)"
},
{
"status": "affected",
"version": "4.2(3b)"
},
{
"status": "affected",
"version": "4.1(3l)"
},
{
"status": "affected",
"version": "4.2(3d)"
},
{
"status": "affected",
"version": "4.3(1.230097)"
},
{
"status": "affected",
"version": "4.2(1e)"
},
{
"status": "affected",
"version": "4.2(1b)"
},
{
"status": "affected",
"version": "4.2(1j)"
},
{
"status": "affected",
"version": "4.2(1i)"
},
{
"status": "affected",
"version": "4.2(1f)"
},
{
"status": "affected",
"version": "4.2(1a)"
},
{
"status": "affected",
"version": "4.2(1c)"
},
{
"status": "affected",
"version": "4.2(1g)"
},
{
"status": "affected",
"version": "4.3(1.230124)"
},
{
"status": "affected",
"version": "4.1(2l)"
},
{
"status": "affected",
"version": "4.2(3e)"
},
{
"status": "affected",
"version": "4.3(1.230138)"
},
{
"status": "affected",
"version": "4.2(3g)"
},
{
"status": "affected",
"version": "4.3(2.230207)"
},
{
"status": "affected",
"version": "4.2(3h)"
},
{
"status": "affected",
"version": "4.2(3i)"
},
{
"status": "affected",
"version": "4.3(2.230270)"
},
{
"status": "affected",
"version": "4.1(3m)"
},
{
"status": "affected",
"version": "4.1(2m)"
},
{
"status": "affected",
"version": "4.3(2.240002)"
},
{
"status": "affected",
"version": "4.3(3.240022)"
},
{
"status": "affected",
"version": "4.2(3j)"
},
{
"status": "affected",
"version": "4.1(3n)"
},
{
"status": "affected",
"version": "4.3(2.240009)"
},
{
"status": "affected",
"version": "4.3(3.240043)"
},
{
"status": "affected",
"version": "4.3(4.240142)"
},
{
"status": "affected",
"version": "4.3(2.240037)"
},
{
"status": "affected",
"version": "4.3(2.240053)"
},
{
"status": "affected",
"version": "4.3(4.240152)"
},
{
"status": "affected",
"version": "4.2(3l)"
},
{
"status": "affected",
"version": "4.3(2.240077)"
},
{
"status": "affected",
"version": "4.3(4.242028)"
},
{
"status": "affected",
"version": "4.3(4.241063)"
},
{
"status": "affected",
"version": "4.3(4.242038)"
},
{
"status": "affected",
"version": "4.2(3m)"
},
{
"status": "affected",
"version": "4.3(2.240090)"
},
{
"status": "affected",
"version": "4.3(5.240021)"
},
{
"status": "affected",
"version": "4.3(2.240107)"
},
{
"status": "affected",
"version": "4.3(4.242066)"
},
{
"status": "affected",
"version": "4.2(3n)"
},
{
"status": "affected",
"version": "4.3(5.250001)"
},
{
"status": "affected",
"version": "4.2(3o)"
},
{
"status": "affected",
"version": "4.3(2.250016)"
},
{
"status": "affected",
"version": "4.3(2.250021)"
},
{
"status": "affected",
"version": "4.3(5.250030)"
},
{
"status": "affected",
"version": "4.3(2.250022)"
},
{
"status": "affected",
"version": "4.3(6.250040)"
},
{
"status": "affected",
"version": "4.3(5.250033)"
},
{
"status": "affected",
"version": "4.3(6.250044)"
},
{
"status": "affected",
"version": "4.3(6.250053)"
},
{
"status": "affected",
"version": "4.3(2.250037)"
},
{
"status": "affected",
"version": "4.3(2.250045)"
},
{
"status": "affected",
"version": "4.3(4.252001)"
},
{
"status": "affected",
"version": "4.3(4.252002)"
},
{
"status": "affected",
"version": "6.0(1.250127)"
},
{
"status": "affected",
"version": "4.2(3p)"
},
{
"status": "affected",
"version": "6.0(1.250131)"
},
{
"status": "affected",
"version": "4.3(6.250101)"
},
{
"status": "affected",
"version": "6.0(1.250174)"
},
{
"status": "affected",
"version": "4.3(6.250117)"
},
{
"status": "affected",
"version": "4.3(5.250043)"
},
{
"status": "affected",
"version": "4.3(6.250039)"
},
{
"status": "affected",
"version": "4.3(5.250045)"
},
{
"status": "affected",
"version": "4.3(6.250060)"
},
{
"status": "affected",
"version": "6.0(1.250130)"
},
{
"status": "affected",
"version": "4.3(4.241014)"
},
{
"status": "affected",
"version": "4.3(2.250063)"
},
{
"status": "affected",
"version": "6.0(1.250192)"
},
{
"status": "affected",
"version": "4.3(6.260003)"
},
{
"status": "affected",
"version": "6.0(1.250194)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user.\u0026nbsp;This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user.\r\n\r\nCisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds Write",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-22T19:09:30.232Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-cimc-cmd-inj-3hKN3bVt",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt"
}
],
"source": {
"advisory": "cisco-sa-cimc-cmd-inj-3hKN3bVt",
"defects": [
"CSCwr60925"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Integrated Management Controller Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20097",
"datePublished": "2026-04-01T16:29:00.607Z",
"dateReserved": "2025-10-08T11:59:15.369Z",
"dateUpdated": "2026-04-22T19:09:30.232Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-20097",
"date": "2026-09-21",
"epss": "0.00391",
"percentile": "0.33011"
},
"nvd": {
"cve": {
"affected": [
{
"affectedData": [
{
"defaultStatus": "unknown",
"product": "Cisco Unified Computing System (Standalone)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "4.0(2g)"
},
{
"status": "affected",
"version": "3.1(2i)"
},
{
"status": "affected",
"version": "3.1(1d)"
},
{
"status": "affected",
"version": "4.0(4i)"
},
{
"status": "affected",
"version": "4.1(1c)"
},
{
"status": "affected",
"version": "4.0(2c)"
},
{
"status": "affected",
"version": "4.0(1e)"
},
{
"status": "affected",
"version": "4.0(2h)"
},
{
"status": "affected",
"version": "4.0(4h)"
},
{
"status": "affected",
"version": "4.0(1h)"
},
{
"status": "affected",
"version": "4.0(2l)"
},
{
"status": "affected",
"version": "3.1(3g)"
},
{
"status": "affected",
"version": "4.0(1.240)"
},
{
"status": "affected",
"version": "4.0(2f)"
},
{
"status": "affected",
"version": "4.0(1g)"
},
{
"status": "affected",
"version": "4.0(2i)"
},
{
"status": "affected",
"version": "3.1(3i)"
},
{
"status": "affected",
"version": "4.0(4d)"
},
{
"status": "affected",
"version": "4.1(1d)"
},
{
"status": "affected",
"version": "3.1(3c)"
},
{
"status": "affected",
"version": "4.0(4k)"
},
{
"status": "affected",
"version": "3.1(2d)"
},
{
"status": "affected",
"version": "3.1(3a)"
},
{
"status": "affected",
"version": "3.1(3j)"
},
{
"status": "affected",
"version": "4.0(2d)"
},
{
"status": "affected",
"version": "4.1(1f)"
},
{
"status": "affected",
"version": "4.0(1c)"
},
{
"status": "affected",
"version": "4.0(4f)"
},
{
"status": "affected",
"version": "4.0(4c)"
},
{
"status": "affected",
"version": "3.1(3d)"
},
{
"status": "affected",
"version": "3.1(2g)"
},
{
"status": "affected",
"version": "3.1(2c)"
},
{
"status": "affected",
"version": "4.0(1d)"
},
{
"status": "affected",
"version": "3.1(2e)"
},
{
"status": "affected",
"version": "4.0(1a)"
},
{
"status": "affected",
"version": "4.0(1b)"
},
{
"status": "affected",
"version": "3.1(3b)"
},
{
"status": "affected",
"version": "4.0(4b)"
},
{
"status": "affected",
"version": "3.1(2b)"
},
{
"status": "affected",
"version": "4.0(4e)"
},
{
"status": "affected",
"version": "3.1(3h)"
},
{
"status": "affected",
"version": "4.0(4l)"
},
{
"status": "affected",
"version": "4.1(1g)"
},
{
"status": "affected",
"version": "4.1(2a)"
},
{
"status": "affected",
"version": "4.0(2n)"
},
{
"status": "affected",
"version": "4.1(1h)"
},
{
"status": "affected",
"version": "3.1(3k)"
},
{
"status": "affected",
"version": "4.1(2b)"
},
{
"status": "affected",
"version": "4.0(2o)"
},
{
"status": "affected",
"version": "4.0(4m)"
},
{
"status": "affected",
"version": "4.1(2d)"
},
{
"status": "affected",
"version": "4.1(3b)"
},
{
"status": "affected",
"version": "4.0(2p)"
},
{
"status": "affected",
"version": "4.1(2e)"
},
{
"status": "affected",
"version": "4.1(2f)"
},
{
"status": "affected",
"version": "4.0(4n)"
},
{
"status": "affected",
"version": "4.0(2q)"
},
{
"status": "affected",
"version": "4.1(3c)"
},
{
"status": "affected",
"version": "4.0(2r)"
},
{
"status": "affected",
"version": "4.1(3d)"
},
{
"status": "affected",
"version": "4.1(2g)"
},
{
"status": "affected",
"version": "4.1(2h)"
},
{
"status": "affected",
"version": "4.1(3f)"
},
{
"status": "affected",
"version": "4.1(2j)"
},
{
"status": "affected",
"version": "4.1(2k)"
},
{
"status": "affected",
"version": "4.1(3h)"
},
{
"status": "affected",
"version": "4.2(2a)"
},
{
"status": "affected",
"version": "4.1(3i)"
},
{
"status": "affected",
"version": "4.2(2f)"
},
{
"status": "affected",
"version": "4.2(2g)"
},
{
"status": "affected",
"version": "4.2(3b)"
},
{
"status": "affected",
"version": "4.1(3l)"
},
{
"status": "affected",
"version": "4.2(3d)"
},
{
"status": "affected",
"version": "4.3(1.230097)"
},
{
"status": "affected",
"version": "4.2(1e)"
},
{
"status": "affected",
"version": "4.2(1b)"
},
{
"status": "affected",
"version": "4.2(1j)"
},
{
"status": "affected",
"version": "4.2(1i)"
},
{
"status": "affected",
"version": "4.2(1f)"
},
{
"status": "affected",
"version": "4.2(1a)"
},
{
"status": "affected",
"version": "4.2(1c)"
},
{
"status": "affected",
"version": "4.2(1g)"
},
{
"status": "affected",
"version": "4.3(1.230124)"
},
{
"status": "affected",
"version": "4.1(2l)"
},
{
"status": "affected",
"version": "4.2(3e)"
},
{
"status": "affected",
"version": "4.3(1.230138)"
},
{
"status": "affected",
"version": "4.2(3g)"
},
{
"status": "affected",
"version": "4.3(2.230207)"
},
{
"status": "affected",
"version": "4.2(3h)"
},
{
"status": "affected",
"version": "4.2(3i)"
},
{
"status": "affected",
"version": "4.3(2.230270)"
},
{
"status": "affected",
"version": "4.1(3m)"
},
{
"status": "affected",
"version": "4.1(2m)"
},
{
"status": "affected",
"version": "4.3(2.240002)"
},
{
"status": "affected",
"version": "4.3(3.240022)"
},
{
"status": "affected",
"version": "4.2(3j)"
},
{
"status": "affected",
"version": "4.1(3n)"
},
{
"status": "affected",
"version": "4.3(2.240009)"
},
{
"status": "affected",
"version": "4.3(3.240043)"
},
{
"status": "affected",
"version": "4.3(4.240142)"
},
{
"status": "affected",
"version": "4.3(2.240037)"
},
{
"status": "affected",
"version": "4.3(2.240053)"
},
{
"status": "affected",
"version": "4.3(4.240152)"
},
{
"status": "affected",
"version": "4.2(3l)"
},
{
"status": "affected",
"version": "4.3(2.240077)"
},
{
"status": "affected",
"version": "4.3(4.242028)"
},
{
"status": "affected",
"version": "4.3(4.241063)"
},
{
"status": "affected",
"version": "4.3(4.242038)"
},
{
"status": "affected",
"version": "4.2(3m)"
},
{
"status": "affected",
"version": "4.3(2.240090)"
},
{
"status": "affected",
"version": "4.3(5.240021)"
},
{
"status": "affected",
"version": "4.3(2.240107)"
},
{
"status": "affected",
"version": "4.3(4.242066)"
},
{
"status": "affected",
"version": "4.2(3n)"
},
{
"status": "affected",
"version": "4.3(5.250001)"
},
{
"status": "affected",
"version": "4.2(3o)"
},
{
"status": "affected",
"version": "4.3(2.250016)"
},
{
"status": "affected",
"version": "4.3(2.250021)"
},
{
"status": "affected",
"version": "4.3(5.250030)"
},
{
"status": "affected",
"version": "4.3(2.250022)"
},
{
"status": "affected",
"version": "4.3(6.250040)"
},
{
"status": "affected",
"version": "4.3(5.250033)"
},
{
"status": "affected",
"version": "4.3(6.250044)"
},
{
"status": "affected",
"version": "4.3(6.250053)"
},
{
"status": "affected",
"version": "4.3(2.250037)"
},
{
"status": "affected",
"version": "4.3(2.250045)"
},
{
"status": "affected",
"version": "4.3(4.252001)"
},
{
"status": "affected",
"version": "4.3(4.252002)"
},
{
"status": "affected",
"version": "6.0(1.250127)"
},
{
"status": "affected",
"version": "4.2(3p)"
},
{
"status": "affected",
"version": "6.0(1.250131)"
},
{
"status": "affected",
"version": "4.3(6.250101)"
},
{
"status": "affected",
"version": "6.0(1.250174)"
},
{
"status": "affected",
"version": "4.3(6.250117)"
},
{
"status": "affected",
"version": "4.3(5.250043)"
},
{
"status": "affected",
"version": "4.3(6.250039)"
},
{
"status": "affected",
"version": "4.3(5.250045)"
},
{
"status": "affected",
"version": "4.3(6.250060)"
},
{
"status": "affected",
"version": "6.0(1.250130)"
},
{
"status": "affected",
"version": "4.3(4.241014)"
},
{
"status": "affected",
"version": "4.3(2.250063)"
},
{
"status": "affected",
"version": "6.0(1.250192)"
},
{
"status": "affected",
"version": "4.3(6.260003)"
},
{
"status": "affected",
"version": "6.0(1.250194)"
}
]
}
],
"source": "psirt@cisco.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(1d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "7A0E75F2-0046-4C9D-931F-E40156AEA8FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(2b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "3505BFC3-F603-454D-ACB8-D92DDB51DB14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(2c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "39BA0882-06F3-4FA3-92E1-F348017ECF7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(2d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "2986E4AB-B295-4E1F-8CE5-997061BF1FFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(2e\\):*:*:*:*:*:*:*",
"matchCriteriaId": "E29CB50B-6434-47D6-820B-E9B3CC8335B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(2g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "49B404E9-00C7-4BE8-90BF-998B2928A932",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(2i\\):*:*:*:*:*:*:*",
"matchCriteriaId": "70181B23-798C-4367-8CDF-E7E812D517D0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(3a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B9AED9CF-2C5D-4060-9DBB-8AE122EDB17A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(3b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "89547608-E65D-4116-BD88-ED235F2A8F30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(3c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "2F8BC560-D6FA-4E8D-A759-067DA66E1D2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(3d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "273547BB-2E8A-4CCC-B90B-7C1949F346C1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(3g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "47B6B934-581E-45AD-9FA5-2BC9ABE7DF6D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(3h\\):*:*:*:*:*:*:*",
"matchCriteriaId": "C24D2CA2-E875-4C56-B47C-CA3A720A1DBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(3i\\):*:*:*:*:*:*:*",
"matchCriteriaId": "581AD621-4679-4EC0-A18B-A430FA8462DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(3j\\):*:*:*:*:*:*:*",
"matchCriteriaId": "58DDF534-D996-4813-928B-B28BCA3F5B46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.1\\(3k\\):*:*:*:*:*:*:*",
"matchCriteriaId": "18698352-0F20-4713-9F9F-A76BBB309602",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(1.240\\):*:*:*:*:*:*:*",
"matchCriteriaId": "748DC972-AC9B-49B2-A1D8-099470D34E75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(1a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "9AE28A2D-D4DE-474E-A514-C4C615A6ABE6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(1b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "986404D3-32FB-4E10-89E6-AD8472B5F0E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(1c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6558BAB8-EF40-4F95-A9D2-8E6466CAB9CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(1d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "4DB2E4DC-79E6-4134-8C92-2805DD7245F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(1e\\):*:*:*:*:*:*:*",
"matchCriteriaId": "E207B395-752B-4FF9-99CB-4CDA1EA1ED9A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(1g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "E172625C-F4F6-4BE7-9D3D-195CF785BDDC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(1h\\):*:*:*:*:*:*:*",
"matchCriteriaId": "C5FAEC28-2A38-4549-AA06-C726382C76CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "21E2611D-8520-4125-A60C-D6DB6CF589D7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "D82A6A44-AB31-4E26-926F-2886EE43FD02",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "D53B6EEA-9307-4C8B-AA00-D056D330F697",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "7A510371-3DC0-44B0-89EA-915AB7181F9B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2h\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B05FB3D8-1C4B-4069-BE36-FFD9893EEF56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2i\\):*:*:*:*:*:*:*",
"matchCriteriaId": "ECDEEF9A-A657-492C-B6B0-AF1DF46D02E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2l\\):*:*:*:*:*:*:*",
"matchCriteriaId": "F19D2E5C-847E-4B92-8414-17D752EC9012",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2n\\):*:*:*:*:*:*:*",
"matchCriteriaId": "18B88351-4562-4F70-9272-FA10E7561956",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2o\\):*:*:*:*:*:*:*",
"matchCriteriaId": "AA1AEA87-E123-4484-A4D5-7A871F53937E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2p\\):*:*:*:*:*:*:*",
"matchCriteriaId": "9DB5E105-F6AE-4145-9070-BC192EE253B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2q\\):*:*:*:*:*:*:*",
"matchCriteriaId": "09E45846-30B5-4BBE-8C82-77D19511B5E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(2r\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BAA224E5-184B-46CF-B970-E48ECFB3A2F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "539B8E60-29DF-4702-9DCA-7BEC4ECE2C43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "1C55674A-4411-463E-B064-388AFA67198E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "C671D9D2-E2F3-4C26-94C4-6BE7101C0C57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4e\\):*:*:*:*:*:*:*",
"matchCriteriaId": "2B62733B-8786-4D3F-878E-FEF6BD3A77A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "2E959214-4A0F-4C28-A3E1-8F64D0846495",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4h\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BBF2BD10-5503-4EE2-8187-10B457A8C1C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4i\\):*:*:*:*:*:*:*",
"matchCriteriaId": "80E4394B-6FD9-4E8C-8A91-506B6ECC542C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4k\\):*:*:*:*:*:*:*",
"matchCriteriaId": "EAD1306C-AFFB-4A03-9A25-444C250D9084",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4l\\):*:*:*:*:*:*:*",
"matchCriteriaId": "11AE1132-3ED8-43EA-8EE9-5B0301693161",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4m\\):*:*:*:*:*:*:*",
"matchCriteriaId": "3356EF91-2091-446D-8B1C-008526B0896C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.0\\(4n\\):*:*:*:*:*:*:*",
"matchCriteriaId": "95EF2B9D-9F79-45B5-8C81-1DBBB6872479",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(1c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "01D712D7-7D32-4C31-9E89-79DCD7ED8A4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(1d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "79B21C68-06D0-4DB5-B1B5-CE18FA50FB0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(1f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6DBB9315-3678-4C84-BD28-1DE60D76A073",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(1g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "5848BEFB-215E-47D6-8C55-403276729A53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(1h\\):*:*:*:*:*:*:*",
"matchCriteriaId": "3B71994F-447D-4DCB-9FF3-148B1D590791",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "CB04F9F4-A379-4B0F-ABDA-6118D3A0A7A2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "CBCCFCCA-A90C-4CDF-84BE-208F52CA6B6F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "39A725C6-D10D-4BB9-9556-5776C7D7D222",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2e\\):*:*:*:*:*:*:*",
"matchCriteriaId": "D8BE9B9A-FBE4-4A71-BB99-DC0921C20D84",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8B8F28D3-AFA4-465F-9D49-1DCC5D2B4874",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "F4E700CB-9B57-433C-AB48-E62974631812",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2h\\):*:*:*:*:*:*:*",
"matchCriteriaId": "05097072-7E2D-4EEE-90FB-9C6526A09D99",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2j\\):*:*:*:*:*:*:*",
"matchCriteriaId": "C9713C09-E5D9-4E6C-8FE4-E2C707BEB748",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2k\\):*:*:*:*:*:*:*",
"matchCriteriaId": "62E9F3AF-0376-4BE3-BDB7-D9AC11186759",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2l\\):*:*:*:*:*:*:*",
"matchCriteriaId": "0D4907B0-1A23-4771-A839-7D79D8B06BC0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(2m\\):*:*:*:*:*:*:*",
"matchCriteriaId": "03E0BB34-2E00-4121-B4B1-14B564FE5FEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(3b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "2DCDB7FF-4095-48DF-B2A5-F934EDDE8451",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(3c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "12AA385D-152F-4C4E-865C-D266B97915A8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(3d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "03C5D98C-2CAC-43F1-B52B-57E4722BA7AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(3f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "9FCC1C6A-DAD2-45BE-A3A7-DD89BB2FB59A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(3h\\):*:*:*:*:*:*:*",
"matchCriteriaId": "83109B12-A9FD-48AB-B658-523A368EBF07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(3i\\):*:*:*:*:*:*:*",
"matchCriteriaId": "220FBC66-C17E-433A-B5D3-87ED8D971639",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(3l\\):*:*:*:*:*:*:*",
"matchCriteriaId": "50C3B4EE-88E7-4FC5-BE86-9ED89B90AA3C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(3m\\):*:*:*:*:*:*:*",
"matchCriteriaId": "96A701FA-6A56-4C47-A84E-48AC635E959C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.1\\(3n\\):*:*:*:*:*:*:*",
"matchCriteriaId": "97BDE0CD-1ABB-4305-B42F-5E7BB1F37846",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(1a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "DDB3FE5A-D05D-44D5-8E4F-32313ECBEF30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(1b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "26052FD7-7426-4B04-9174-73D02957BFC5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(1c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "7FFA5A44-790F-45BD-987A-95E52CC829F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(1e\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BADBC324-301F-4DE0-A3CC-7E38AB153D6F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(1f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A00A126E-BC7F-4C75-896A-C8B0DA0B925D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(1g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "3CED4427-10F8-48D4-9336-7ECB3F11938D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(1i\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B711E297-EFA6-43CA-A086-A1810F937101",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(1j\\):*:*:*:*:*:*:*",
"matchCriteriaId": "3708F937-4FA6-4DD8-B0C8-093263583672",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(2a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6146B191-2B42-4EB9-97E3-08F4B9447E0D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(2f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "4D44996B-D9F2-4541-90E0-02A6690083A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(2g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "E7FF61B6-CB1A-4F9A-9158-53A02BD2A161",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "AFB3EEB2-49B2-4850-B2E7-771D1694CD66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "34D07D7C-CD97-4B9A-8265-E40A22D7AEE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3e\\):*:*:*:*:*:*:*",
"matchCriteriaId": "97B88CF8-4E88-429B-BDBA-7991CB7D032B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6A7C816E-3191-4D44-AB8B-4719EC642742",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3h\\):*:*:*:*:*:*:*",
"matchCriteriaId": "64713265-61F4-44D0-B1B4-6609A837F718",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3i\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A488703E-EB6E-49BE-86A5-0DE444460417",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3j\\):*:*:*:*:*:*:*",
"matchCriteriaId": "50CD6F2E-DDC8-4A6A-B2AD-20419A3A119C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3l\\):*:*:*:*:*:*:*",
"matchCriteriaId": "9180C94B-E94F-430A-8681-4B85C7ABDBC9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3m\\):*:*:*:*:*:*:*",
"matchCriteriaId": "483D371B-0BD8-44E9-B260-27A4CFBE97F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3n\\):*:*:*:*:*:*:*",
"matchCriteriaId": "608E3BD9-8685-4A3E-8157-1F322764D935",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3o\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8F28CB53-7B71-47C0-B728-965837D7D94B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.2\\(3p\\):*:*:*:*:*:*:*",
"matchCriteriaId": "E4D77F56-DAF7-4639-A911-295E098DC9B3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(1.230097\\):*:*:*:*:*:*:*",
"matchCriteriaId": "707943EC-B4E1-402E-93F2-61155E9D9A7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(1.230124\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BC28F760-C39D-4FD4-AC70-8CEC9ECDA554",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(1.230138\\):*:*:*:*:*:*:*",
"matchCriteriaId": "AA121B58-42FC-4AAA-BDA8-94D0D6F73EB1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.230207\\):*:*:*:*:*:*:*",
"matchCriteriaId": "67EA5B96-4C34-430D-91A1-E599EDBC5375",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.230270\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A81EEB35-D849-48C8-880F-44586EADA1CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.240002\\):*:*:*:*:*:*:*",
"matchCriteriaId": "82D66234-EF8F-41B7-A5D4-0CA5D48793EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.240009\\):*:*:*:*:*:*:*",
"matchCriteriaId": "4B99CA63-AABE-40A5-98C5-A275A6C16385",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.240037\\):*:*:*:*:*:*:*",
"matchCriteriaId": "F3CC9A12-2730-436B-84AD-D92F3F7EC6A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.240053\\):*:*:*:*:*:*:*",
"matchCriteriaId": "5798960F-6B71-4FB2-979D-EE7959B176C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.240077\\):*:*:*:*:*:*:*",
"matchCriteriaId": "73CEEE7A-504A-4A32-A1F8-D6000E989D9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.240090\\):*:*:*:*:*:*:*",
"matchCriteriaId": "C385A9FC-2CA5-4302-A7FB-0F51F5690FE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.240107\\):*:*:*:*:*:*:*",
"matchCriteriaId": "DF78E864-5897-4F4B-9C48-6D1682F52FA1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.250016\\):*:*:*:*:*:*:*",
"matchCriteriaId": "58905674-6D12-4D64-96E1-C7B68B9B533E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.250021\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B8F924B7-E7E6-4F91-A29A-10BAF36D37C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.250022\\):*:*:*:*:*:*:*",
"matchCriteriaId": "9D152689-9491-4E5F-8C4E-59E072C6C464",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.250037\\):*:*:*:*:*:*:*",
"matchCriteriaId": "7BECD01C-91C3-4A03-8695-F2BFA33B0733",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.250045\\):*:*:*:*:*:*:*",
"matchCriteriaId": "313956D4-D33D-4D68-9FC5-10AFFC6815DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.250063\\):*:*:*:*:*:*:*",
"matchCriteriaId": "EF2BF481-BDD8-4637-9E73-F35AF7BD89DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(3.240022\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B514BF97-4D5F-41EB-8A2F-61C7872CBE5A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(3.240043\\):*:*:*:*:*:*:*",
"matchCriteriaId": "50F49E6F-229D-4179-8CE9-907D6A33466C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.240142\\):*:*:*:*:*:*:*",
"matchCriteriaId": "60A65978-E02D-4D06-A75F-45314FE839D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.240152\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6E341DE8-C1B3-4781-9317-50C3003AB5FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.241014\\):*:*:*:*:*:*:*",
"matchCriteriaId": "93A935AB-601E-4FFD-9D86-868389D8F9F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.241063\\):*:*:*:*:*:*:*",
"matchCriteriaId": "1DDEC37C-56DF-4E48-9460-0C1DB42A4D3C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.242028\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BC737A47-3CE9-4023-99D5-D7A2DCAA41FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.242038\\):*:*:*:*:*:*:*",
"matchCriteriaId": "288C568D-AA87-4FF2-A581-4D5CD33B820B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.242066\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A8DE4607-D9BC-4717-9394-9BD4327ADBDB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.252001\\):*:*:*:*:*:*:*",
"matchCriteriaId": "5A35D000-58B6-435A-86DE-EE179A99513F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.252002\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A1DDEA92-C6E3-4046-983E-A8031BC6C690",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.240021\\):*:*:*:*:*:*:*",
"matchCriteriaId": "5293950E-970F-4542-8ADD-9D1692D4C9EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250001\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6E70EC20-7CDB-4DD4-8F1D-2DCDF5DBD147",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250030\\):*:*:*:*:*:*:*",
"matchCriteriaId": "D0DA7140-AB72-4215-995E-956D35669766",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250033\\):*:*:*:*:*:*:*",
"matchCriteriaId": "1A62E579-B113-40A5-A497-92A80CC91F2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250043\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8A424479-9816-4A4B-A9CA-1349FD016FEC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250045\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B92AB187-9C5E-42A6-B1FD-219116583914",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250039\\):*:*:*:*:*:*:*",
"matchCriteriaId": "4CBF1228-D8D8-4FAF-9986-55B8D4C5B3B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250040\\):*:*:*:*:*:*:*",
"matchCriteriaId": "2B40F8FD-19AD-4726-B2E9-DAD09394970E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250044\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B7D0F9CB-0B4C-4680-BCFF-E80633DCD3F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250053\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8D9E7A5F-99AE-4F34-867B-931C4B880E61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250060\\):*:*:*:*:*:*:*",
"matchCriteriaId": "85DDCB2E-396C-4B4B-9F06-2B3E36045EC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250101\\):*:*:*:*:*:*:*",
"matchCriteriaId": "F1705D6C-69F7-4492-A4AF-09BFCA820286",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250117\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B51CAF4B-0BCD-4DAF-8774-94212B1E357D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.260003\\):*:*:*:*:*:*:*",
"matchCriteriaId": "24114854-41E9-4E3C-813D-A006FCA7E585",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250127\\):*:*:*:*:*:*:*",
"matchCriteriaId": "897DDFB9-DF7A-4455-9D5F-17305920AB76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250130\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8B7A2A76-A5EE-4975-A735-3BCC6C89EF8D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250131\\):*:*:*:*:*:*:*",
"matchCriteriaId": "437298D0-C839-43E4-8FE1-7CB0977FB8C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250174\\):*:*:*:*:*:*:*",
"matchCriteriaId": "41B1F1F7-915D-4CC8-9DCF-200D84872C81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250192\\):*:*:*:*:*:*:*",
"matchCriteriaId": "25CF81F3-6576-45F1-97AE-9AA21D5575E0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250194\\):*:*:*:*:*:*:*",
"matchCriteriaId": "63A1580D-A644-4F4C-B41E-5D97273CB6A6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user.\u0026nbsp;This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user.\r\n\r\nCisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root."
}
],
"id": "CVE-2026-20097",
"lastModified": "2026-08-28T19:09:58.700",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.2,
"impactScore": 5.2,
"source": "psirt@cisco.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-20097",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-01T00:00:00+00:00",
"version": "2.0.3"
}
}
]
},
"published": "2026-04-01T17:28:30.733",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
},
"redhat_vex": {
"current_release_date": "2026-04-02T16:56:43+00:00",
"cve": "CVE-2026-20097",
"id": "CVE-2026-20097",
"initial_release_date": "2026-01-01T00:00:00+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "Cisco Integrated Management Controller Remote Code Execution Vulnerability",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-20097.json",
"version": "3"
},
"vulnrichment": {
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20097",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-01T18:18:16.945390Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-01T18:18:19.592Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Unified Computing System (Standalone)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "4.0(2g)"
},
{
"status": "affected",
"version": "3.1(2i)"
},
{
"status": "affected",
"version": "3.1(1d)"
},
{
"status": "affected",
"version": "4.0(4i)"
},
{
"status": "affected",
"version": "4.1(1c)"
},
{
"status": "affected",
"version": "4.0(2c)"
},
{
"status": "affected",
"version": "4.0(1e)"
},
{
"status": "affected",
"version": "4.0(2h)"
},
{
"status": "affected",
"version": "4.0(4h)"
},
{
"status": "affected",
"version": "4.0(1h)"
},
{
"status": "affected",
"version": "4.0(2l)"
},
{
"status": "affected",
"version": "3.1(3g)"
},
{
"status": "affected",
"version": "4.0(1.240)"
},
{
"status": "affected",
"version": "4.0(2f)"
},
{
"status": "affected",
"version": "4.0(1g)"
},
{
"status": "affected",
"version": "4.0(2i)"
},
{
"status": "affected",
"version": "3.1(3i)"
},
{
"status": "affected",
"version": "4.0(4d)"
},
{
"status": "affected",
"version": "4.1(1d)"
},
{
"status": "affected",
"version": "3.1(3c)"
},
{
"status": "affected",
"version": "4.0(4k)"
},
{
"status": "affected",
"version": "3.1(2d)"
},
{
"status": "affected",
"version": "3.1(3a)"
},
{
"status": "affected",
"version": "3.1(3j)"
},
{
"status": "affected",
"version": "4.0(2d)"
},
{
"status": "affected",
"version": "4.1(1f)"
},
{
"status": "affected",
"version": "4.0(1c)"
},
{
"status": "affected",
"version": "4.0(4f)"
},
{
"status": "affected",
"version": "4.0(4c)"
},
{
"status": "affected",
"version": "3.1(3d)"
},
{
"status": "affected",
"version": "3.1(2g)"
},
{
"status": "affected",
"version": "3.1(2c)"
},
{
"status": "affected",
"version": "4.0(1d)"
},
{
"status": "affected",
"version": "3.1(2e)"
},
{
"status": "affected",
"version": "4.0(1a)"
},
{
"status": "affected",
"version": "4.0(1b)"
},
{
"status": "affected",
"version": "3.1(3b)"
},
{
"status": "affected",
"version": "4.0(4b)"
},
{
"status": "affected",
"version": "3.1(2b)"
},
{
"status": "affected",
"version": "4.0(4e)"
},
{
"status": "affected",
"version": "3.1(3h)"
},
{
"status": "affected",
"version": "4.0(4l)"
},
{
"status": "affected",
"version": "4.1(1g)"
},
{
"status": "affected",
"version": "4.1(2a)"
},
{
"status": "affected",
"version": "4.0(2n)"
},
{
"status": "affected",
"version": "4.1(1h)"
},
{
"status": "affected",
"version": "3.1(3k)"
},
{
"status": "affected",
"version": "4.1(2b)"
},
{
"status": "affected",
"version": "4.0(2o)"
},
{
"status": "affected",
"version": "4.0(4m)"
},
{
"status": "affected",
"version": "4.1(2d)"
},
{
"status": "affected",
"version": "4.1(3b)"
},
{
"status": "affected",
"version": "4.0(2p)"
},
{
"status": "affected",
"version": "4.1(2e)"
},
{
"status": "affected",
"version": "4.1(2f)"
},
{
"status": "affected",
"version": "4.0(4n)"
},
{
"status": "affected",
"version": "4.0(2q)"
},
{
"status": "affected",
"version": "4.1(3c)"
},
{
"status": "affected",
"version": "4.0(2r)"
},
{
"status": "affected",
"version": "4.1(3d)"
},
{
"status": "affected",
"version": "4.1(2g)"
},
{
"status": "affected",
"version": "4.1(2h)"
},
{
"status": "affected",
"version": "4.1(3f)"
},
{
"status": "affected",
"version": "4.1(2j)"
},
{
"status": "affected",
"version": "4.1(2k)"
},
{
"status": "affected",
"version": "4.1(3h)"
},
{
"status": "affected",
"version": "4.2(2a)"
},
{
"status": "affected",
"version": "4.1(3i)"
},
{
"status": "affected",
"version": "4.2(2f)"
},
{
"status": "affected",
"version": "4.2(2g)"
},
{
"status": "affected",
"version": "4.2(3b)"
},
{
"status": "affected",
"version": "4.1(3l)"
},
{
"status": "affected",
"version": "4.2(3d)"
},
{
"status": "affected",
"version": "4.3(1.230097)"
},
{
"status": "affected",
"version": "4.2(1e)"
},
{
"status": "affected",
"version": "4.2(1b)"
},
{
"status": "affected",
"version": "4.2(1j)"
},
{
"status": "affected",
"version": "4.2(1i)"
},
{
"status": "affected",
"version": "4.2(1f)"
},
{
"status": "affected",
"version": "4.2(1a)"
},
{
"status": "affected",
"version": "4.2(1c)"
},
{
"status": "affected",
"version": "4.2(1g)"
},
{
"status": "affected",
"version": "4.3(1.230124)"
},
{
"status": "affected",
"version": "4.1(2l)"
},
{
"status": "affected",
"version": "4.2(3e)"
},
{
"status": "affected",
"version": "4.3(1.230138)"
},
{
"status": "affected",
"version": "4.2(3g)"
},
{
"status": "affected",
"version": "4.3(2.230207)"
},
{
"status": "affected",
"version": "4.2(3h)"
},
{
"status": "affected",
"version": "4.2(3i)"
},
{
"status": "affected",
"version": "4.3(2.230270)"
},
{
"status": "affected",
"version": "4.1(3m)"
},
{
"status": "affected",
"version": "4.1(2m)"
},
{
"status": "affected",
"version": "4.3(2.240002)"
},
{
"status": "affected",
"version": "4.3(3.240022)"
},
{
"status": "affected",
"version": "4.2(3j)"
},
{
"status": "affected",
"version": "4.1(3n)"
},
{
"status": "affected",
"version": "4.3(2.240009)"
},
{
"status": "affected",
"version": "4.3(3.240043)"
},
{
"status": "affected",
"version": "4.3(4.240142)"
},
{
"status": "affected",
"version": "4.3(2.240037)"
},
{
"status": "affected",
"version": "4.3(2.240053)"
},
{
"status": "affected",
"version": "4.3(4.240152)"
},
{
"status": "affected",
"version": "4.2(3l)"
},
{
"status": "affected",
"version": "4.3(2.240077)"
},
{
"status": "affected",
"version": "4.3(4.242028)"
},
{
"status": "affected",
"version": "4.3(4.241063)"
},
{
"status": "affected",
"version": "4.3(4.242038)"
},
{
"status": "affected",
"version": "4.2(3m)"
},
{
"status": "affected",
"version": "4.3(2.240090)"
},
{
"status": "affected",
"version": "4.3(5.240021)"
},
{
"status": "affected",
"version": "4.3(2.240107)"
},
{
"status": "affected",
"version": "4.3(4.242066)"
},
{
"status": "affected",
"version": "4.2(3n)"
},
{
"status": "affected",
"version": "4.3(5.250001)"
},
{
"status": "affected",
"version": "4.2(3o)"
},
{
"status": "affected",
"version": "4.3(2.250016)"
},
{
"status": "affected",
"version": "4.3(2.250021)"
},
{
"status": "affected",
"version": "4.3(5.250030)"
},
{
"status": "affected",
"version": "4.3(2.250022)"
},
{
"status": "affected",
"version": "4.3(6.250040)"
},
{
"status": "affected",
"version": "4.3(5.250033)"
},
{
"status": "affected",
"version": "4.3(6.250044)"
},
{
"status": "affected",
"version": "4.3(6.250053)"
},
{
"status": "affected",
"version": "4.3(2.250037)"
},
{
"status": "affected",
"version": "4.3(2.250045)"
},
{
"status": "affected",
"version": "4.3(4.252001)"
},
{
"status": "affected",
"version": "4.3(4.252002)"
},
{
"status": "affected",
"version": "6.0(1.250127)"
},
{
"status": "affected",
"version": "4.2(3p)"
},
{
"status": "affected",
"version": "6.0(1.250131)"
},
{
"status": "affected",
"version": "4.3(6.250101)"
},
{
"status": "affected",
"version": "6.0(1.250174)"
},
{
"status": "affected",
"version": "4.3(6.250117)"
},
{
"status": "affected",
"version": "4.3(5.250043)"
},
{
"status": "affected",
"version": "4.3(6.250039)"
},
{
"status": "affected",
"version": "4.3(5.250045)"
},
{
"status": "affected",
"version": "4.3(6.250060)"
},
{
"status": "affected",
"version": "6.0(1.250130)"
},
{
"status": "affected",
"version": "4.3(4.241014)"
},
{
"status": "affected",
"version": "4.3(2.250063)"
},
{
"status": "affected",
"version": "6.0(1.250192)"
},
{
"status": "affected",
"version": "4.3(6.260003)"
},
{
"status": "affected",
"version": "6.0(1.250194)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user.\u0026nbsp;This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user.\r\n\r\nCisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "Out-of-bounds Write",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-22T19:09:30.232Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-cimc-cmd-inj-3hKN3bVt",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt"
}
],
"source": {
"advisory": "cisco-sa-cimc-cmd-inj-3hKN3bVt",
"defects": [
"CSCwr60925"
],
"discovery": "EXTERNAL"
},
"title": "Cisco Integrated Management Controller Remote Code Execution Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20097",
"datePublished": "2026-04-01T16:29:00.607Z",
"dateReserved": "2025-10-08T11:59:15.369Z",
"dateUpdated": "2026-04-22T19:09:30.232Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…