A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause the interface to restart, resulting in a denial of service (DoS) condition.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imc-gui-dos-TZjrFyZh | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
History
26 Oct 2021, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:cisco:ucs_c3260:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c4200:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c460_m4:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c480_ml_m5:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c24_m3:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c220_m5:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c245_m6:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c240_m5:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c420_m3:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c3160:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_s3260:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c480_m5:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c225_m6:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c260_m2:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c125_m5:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c22_m3:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c460_m2:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c220_m4:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c240_m3:-:*:*:*:*:*:*:* cpe:2.3:a:cisco:unified_computing_system:*:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c240_sd_m5:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c890_m5:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:ucs_c220_m3:-:*:*:*:*:*:*:* |
|
| References | (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imc-gui-dos-TZjrFyZh - Vendor Advisory | |
| CWE | CWE-20 | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
21 Oct 2021, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-10-21 03:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-34736
Mitre link : CVE-2021-34736
CVE.ORG link : CVE-2021-34736
JSON object : View
Products Affected
cisco
- ucs_c22_m3
- ucs_c480_ml_m5
- ucs_c4200
- ucs_c890_m5
- ucs_c125_m5
- unified_computing_system
- ucs_c220_m4
- ucs_c420_m3
- ucs_c240_sd_m5
- ucs_c480_m5
- ucs_c3260
- ucs_c240_m3
- ucs_c24_m3
- ucs_s3260
- ucs_c220_m5
- ucs_c3160
- ucs_c240_m5
- ucs_c460_m2
- ucs_c245_m6
- ucs_c220_m3
- ucs_c260_m2
- ucs_c225_m6
- ucs_c460_m4
CWE
CWE-20
Improper Input Validation