CVE-2026-20095

Cisco Integrated Management Controller Command Injection Vulnerability

Published Apr 1, 2026 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Description

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user.

This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user. Cisco has assigned this vulnerability a Security Impact Rating (SIR) of High, rather than Medium as the score indicates, because additional security implications could occur once the attacker has become root.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco Enterprise NFV Infrastructure Software

unknown

Version	Status	Constraints
`4.1.1`	affected	—
`3.9.1`	affected	—
`3.5.2`	affected	—
`3.12.2`	affected	—
`3.6.2`	affected	—
`3.9.2`	affected	—
`3.11.3`	affected	—
`3.11.1`	affected	—
`3.5.1`	affected	—
`3.3.1`	affected	—
`3.10.2`	affected	—
`3.12.1b`	affected	—
`3.4.1`	affected	—
`3.12.1a`	affected	—
`3.6.3`	affected	—
`3.8.1`	affected	—
`3.11.2`	affected	—
`3.12.1`	affected	—
`3.12.3`	affected	—
`3.10.1`	affected	—
`3.6.1`	affected	—
`3.10.3`	affected	—
`3.7.1`	affected	—
`4.1.2`	affected	—
`4.2.1`	affected	—
`4.2.2`	affected	—
`4.4.1`	affected	—
`4.4.2`	affected	—
`4.5.1`	affected	—
`4.4.3`	affected	—
`4.6.1`	affected	—
`4.7.1`	affected	—
`4.6.2-FC2`	affected	—
`4.6.2-FC3`	affected	—
`4.6.2`	affected	—
`4.8.1`	affected	—
`4.8.2`	affected	—
`4.9.1`	affected	—
`4.6.3`	affected	—
`4.9.2-FC5`	affected	—
`4.9.2`	affected	—
`4.10.1`	affected	—
`4.9.3`	affected	—
`4.11.1`	affected	—
`4.9.4`	affected	—
`4.12.1`	affected	—
`4.6.4`	affected	—
`4.12.2`	affected	—
`4.13.1`	affected	—
`4.9.4-ES8`	affected	—
`4.9.5`	affected	—
`4.12.3`	affected	—
`4.6.5-ES1`	affected	—
`4.9.4-ES9`	affected	—
`4.14.1`	affected	—
`4.6.3-FC4`	affected	—
`4.9.4-FC3`	affected	—
`4.12.4`	affected	—
`4.15.1`	affected	—
`4.9.6`	affected	—
`4.16.1`	affected	—
`4.15.2`	affected	—
`4.12.5`	affected	—
`4.15.3`	affected	—
`4.15.4`	affected	—
`4.18.1`	affected	—
`4.12.6`	affected	—
`4.18.2`	affected	—
`4.18.2a`	affected	—

Cisco

Cisco Unified Computing System (Standalone)

unknown

Version	Status	Constraints
`4.0(2g)`	affected	—
`3.1(2i)`	affected	—
`3.1(1d)`	affected	—
`4.0(4i)`	affected	—
`4.1(1c)`	affected	—
`4.0(2c)`	affected	—
`4.0(1e)`	affected	—
`4.0(2h)`	affected	—
`4.0(4h)`	affected	—
`4.0(1h)`	affected	—
`4.0(2l)`	affected	—
`3.1(3g)`	affected	—
`4.0(1.240)`	affected	—
`4.0(2f)`	affected	—
`4.0(1g)`	affected	—
`4.0(2i)`	affected	—
`3.1(3i)`	affected	—
`4.0(4d)`	affected	—
`4.1(1d)`	affected	—
`3.1(3c)`	affected	—
`4.0(4k)`	affected	—
`3.1(2d)`	affected	—
`3.1(3a)`	affected	—
`3.1(3j)`	affected	—
`4.0(2d)`	affected	—
`4.1(1f)`	affected	—
`4.0(4j)`	affected	—
`4.0(2m)`	affected	—
`4.0(2k)`	affected	—
`4.0(1c)`	affected	—
`4.0(4f)`	affected	—
`4.0(4c)`	affected	—
`3.1(3d)`	affected	—
`3.1(2g)`	affected	—
`3.1(2c)`	affected	—
`4.0(1d)`	affected	—
`3.1(2e)`	affected	—
`4.0(1a)`	affected	—
`4.0(1b)`	affected	—
`3.1(3b)`	affected	—
`4.0(4b)`	affected	—
`3.1(2b)`	affected	—
`4.0(4e)`	affected	—
`3.1(3h)`	affected	—
`4.0(4l)`	affected	—
`4.1(1g)`	affected	—
`4.1(2a)`	affected	—
`4.0(2n)`	affected	—
`4.1(1h)`	affected	—
`3.1(3k)`	affected	—
`4.1(2b)`	affected	—
`4.0(2o)`	affected	—
`4.0(4m)`	affected	—
`4.1(2d)`	affected	—
`4.1(3b)`	affected	—
`4.0(2p)`	affected	—
`4.1(2e)`	affected	—
`4.1(2f)`	affected	—
`4.0(4n)`	affected	—
`4.0(2q)`	affected	—
`4.1(3c)`	affected	—
`4.0(2r)`	affected	—
`4.1(3d)`	affected	—
`4.1(2g)`	affected	—
`4.1(2h)`	affected	—
`4.1(3g)`	affected	—
`4.1(3f)`	affected	—
`4.1(2j)`	affected	—
`4.1(2k)`	affected	—
`4.1(3h)`	affected	—
`4.2(2a)`	affected	—
`4.1(3i)`	affected	—
`4.2(2f)`	affected	—
`4.2(2g)`	affected	—
`4.2(3b)`	affected	—
`4.1(3l)`	affected	—
`4.2(3d)`	affected	—
`4.3(1.230097)`	affected	—
`4.2(1e)`	affected	—
`4.2(1b)`	affected	—
`4.2(1j)`	affected	—
`4.2(1i)`	affected	—
`4.2(1f)`	affected	—
`4.2(1a)`	affected	—
`4.2(1c)`	affected	—
`4.2(1g)`	affected	—
`4.3(1.230124)`	affected	—
`4.1(2l)`	affected	—
`4.2(3e)`	affected	—
`4.3(1.230138)`	affected	—
`4.2(3g)`	affected	—
`4.3(2.230207)`	affected	—
`4.2(3h)`	affected	—
`4.2(3i)`	affected	—
`4.3(2.230270)`	affected	—
`4.1(3m)`	affected	—
`4.1(2m)`	affected	—
`4.3(2.240002)`	affected	—
`4.3(3.240022)`	affected	—
`4.2(3j)`	affected	—
`4.1(3n)`	affected	—
`4.3(2.240009)`	affected	—
`4.3(3.240041)`	affected	—
`4.2(3k)`	affected	—
`4.3(3.240043)`	affected	—
`4.3(4.240142)`	affected	—
`4.3(2.240037)`	affected	—
`4.3(2.240053)`	affected	—
`4.3(4.240152)`	affected	—
`4.2(3l)`	affected	—
`4.3(2.240077)`	affected	—
`4.3(4.242028)`	affected	—
`4.3(4.241063)`	affected	—
`4.3(4.242038)`	affected	—
`4.2(3m)`	affected	—
`4.3(2.240090)`	affected	—
`4.3(5.240021)`	affected	—
`4.3(2.240107)`	affected	—
`4.3(4.242066)`	affected	—
`4.2(3n)`	affected	—
`4.3(5.250001)`	affected	—
`4.2(3o)`	affected	—
`4.3(2.250016)`	affected	—
`4.3(2.250021)`	affected	—
`4.3(5.250030)`	affected	—
`4.3(2.250022)`	affected	—
`4.3(6.250039)`	affected	—
`4.3(6.250040)`	affected	—
`4.3(5.250033)`	affected	—
`4.3(6.250044)`	affected	—
`4.3(6.250053)`	affected	—
`4.3(2.250037)`	affected	—
`4.3(2.250045)`	affected	—
`4.3(4.252001)`	affected	—
`4.3(4.252002)`	affected	—
`6.0(1.250127)`	affected	—
`4.2(3p)`	affected	—
`6.0(1.250131)`	affected	—
`4.3(6.250101)`	affected	—
`6.0(1.250174)`	affected	—
`4.3(6.250117)`	affected	—
`4.3(5.250043)`	affected	—
`4.3(5.250045)`	affected	—
`4.3(6.250060)`	affected	—
`6.0(1.250130)`	affected	—
`4.3(4.241014)`	affected	—
`4.3(2.250063)`	affected	—
`6.0(1.250192)`	affected	—
`4.3(6.260003)`	affected	—
`6.0(1.250194)`	affected	—

Cisco

Cisco Unified Computing System E-Series Software (UCSE)

unknown

Version	Status	Constraints
`3.2.7`	affected	—
`3.2.6`	affected	—
`3.2.4`	affected	—
`3.2.10`	affected	—
`3.2.2`	affected	—
`3.2.3`	affected	—
`2.4.0`	affected	—
`3.2.1`	affected	—
`3.2.11.1`	affected	—
`3.2.8`	affected	—
`3.1.1`	affected	—
`3.0.2`	affected	—
`2.1.0`	affected	—
`2.2.2`	affected	—
`3.1.2`	affected	—
`3.0.1`	affected	—
`2.3.2`	affected	—
`2.3.5`	affected	—
`2.2.1`	affected	—
`3.1.4`	affected	—
`2.4.1`	affected	—
`2.3.1`	affected	—
`3.1.3`	affected	—
`2.3.3`	affected	—
`2.4.2`	affected	—
`3.1.5`	affected	—
`3.1.0`	affected	—
`2.0.0`	affected	—
`3.2.11.3`	affected	—
`3.2.11.5`	affected	—
`3.2.12.2`	affected	—
`3.2.13.6`	affected	—
`3.2.14`	affected	—
`4.11.1`	affected	—
`3.2.15`	affected	—
`4.12.1`	affected	—
`3.2.15.3`	affected	—
`4.12.2`	affected	—
`3.2.16.1`	affected	—
`4.00`	affected	—
`4.15.2`	affected	—
`4.02`	affected	—

Configuration 1 [-]

OR	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.3.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.4.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.5.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.5.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.6.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.6.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.6.3:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.7.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.8.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.9.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.9.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.10.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.10.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.10.3:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.11.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.11.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.11.3:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.1a:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.1b:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.3:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.1.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.1.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.2.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.2.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.4.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.4.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.4.3:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.5.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.2-fc2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.2-fc3:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.3:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.3-fc4:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.4:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.5-es1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.7.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.8.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.8.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.2-fc5:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.3:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4-es8:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4-es9:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4-fc3:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.5:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.6:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.10.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.11.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.3:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.4:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.5:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.6:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.13.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.14.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.15.1:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.15.2:::::::*
	cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.15.3:::::::*
cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.15.4:::::::*
cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.16.1:::::::*
cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.18.1:::::::*
cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.18.2:::::::*
cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.18.2a:::::::*

Configuration 2 [-]

OR	cpe:2.3:a:cisco:unified_computing_system:3.1\(1d\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(2b\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(2c\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(2d\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(2e\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(2g\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(2i\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(3a\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(3b\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(3c\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(3d\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(3g\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(3h\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(3i\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(3j\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:3.1\(3k\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(1.240\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(1a\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(1b\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(1c\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(1d\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(1e\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(1g\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(1h\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2c\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2d\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2f\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2g\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2h\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2i\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2k\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2l\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2m\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2n\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2o\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2p\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2q\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(2r\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4b\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4c\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4d\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4e\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4f\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4h\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4i\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4j\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4k\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4l\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4m\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.0\(4n\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(1c\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(1d\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(1f\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(1g\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(1h\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(2a\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(2b\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(2d\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(2e\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(2f\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(2g\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(2h\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(2j\):::::::*
	cpe:2.3:a:cisco:unified_computing_system:4.1\(2k\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(2l\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(2m\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(3b\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(3c\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(3d\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(3f\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(3g\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(3h\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(3i\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(3l\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(3m\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.1\(3n\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(1a\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(1b\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(1c\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(1e\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(1f\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(1g\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(1i\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(1j\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(2a\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(2f\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(2g\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3b\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3d\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3e\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3g\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3h\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3i\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3j\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3k\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3l\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3m\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3n\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3o\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.2\(3p\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(1.230097\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(1.230124\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(1.230138\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.230207\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.230270\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240002\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240009\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240037\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240053\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240077\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240090\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240107\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250016\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250021\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250022\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250037\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250045\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250063\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(3.240022\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(3.240041\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(3.240043\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(4.240142\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(4.240152\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(4.241014\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(4.241063\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(4.242028\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(4.242038\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(4.242066\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(4.252001\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(4.252002\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(5.240021\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(5.250001\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(5.250030\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(5.250033\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(5.250043\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(5.250045\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250039\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250040\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250044\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250053\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250060\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250101\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250117\):::::::*
cpe:2.3:a:cisco:unified_computing_system:4.3\(6.260003\):::::::*
cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250127\):::::::*
cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250130\):::::::*
cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250131\):::::::*
cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250174\):::::::*
cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250192\):::::::*
cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250194\):::::::*

Configuration 3 [-]

OR	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.0.0:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.1.0:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.2.1:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.2.2:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.3.1:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.3.2:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.3.3:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.3.5:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.4.0:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.4.1:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.4.2:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.0.1:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.0.2:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.0:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.1:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.2:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.3:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.4:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.5:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.1:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.2:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.3:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.4:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.6:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.7:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.8:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.10:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.11.1:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.11.3:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.11.5:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.12.2:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.13.6:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.14:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.15:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.15.3:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.16.1:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.00:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.02:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.11.1:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.12.1:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.12.2:::::::*
	cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.15.2:::::::*

No data.

Vendor Product Versions

Cisco

Enterprise Nfv Infrastructure Software

Version	Status	Scheme	Platform
`4.1.1`	affected	semver	—

Cisco

Unified Computing System

Version	Status	Scheme	Platform
`4.0(2g)`	affected	semver	—

Cisco

Unified Computing System Software

Version	Status	Scheme	Platform
`3.2.7`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.945% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt

History

Aug 28, 2026 7:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco unified Computing System E-series Software
CPEs		cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.10.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.10.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.10.3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.11.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.11.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.11.3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.1a:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.1b:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.12.3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.3.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.4.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.5.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.5.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.6.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.6.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.6.3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.7.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.8.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.9.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:3.9.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.1.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.1.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.10.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.11.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.4:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.5:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.12.6:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.13.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.14.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.15.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.15.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.15.3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.15.4:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.16.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.18.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.18.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.18.2a:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.2.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.2.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.4.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.4.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.4.3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.5.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.2-fc2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.2-fc3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.3-fc4:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.4:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.6.5-es1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.7.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.8.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.8.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.1:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.2-fc5:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.2:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4-es8:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4-es9:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4-fc3:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.4:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.5:::::::* cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:4.9.6:::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(1d\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(2b\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(2c\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(2d\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(2e\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(2g\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(2i\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(3a\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(3b\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(3c\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(3d\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(3g\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(3h\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(3i\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(3j\):::::::* cpe:2.3:a:cisco:unified_computing_system:3.1\(3k\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(1.240\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(1a\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(1b\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(1c\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(1d\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(1e\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(1g\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(1h\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2c\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2d\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2f\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2g\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2h\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2i\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2k\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2l\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2m\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2n\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2o\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2p\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2q\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(2r\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4b\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4c\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4d\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4e\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4f\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4h\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4i\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4j\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4k\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4l\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4m\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.0\(4n\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(1c\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(1d\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(1f\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(1g\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(1h\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2a\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2b\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2d\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2e\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2f\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2g\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2h\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2j\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2k\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2l\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(2m\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(3b\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(3c\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(3d\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(3f\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(3g\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(3h\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(3i\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(3l\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(3m\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.1\(3n\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(1a\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(1b\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(1c\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(1e\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(1f\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(1g\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(1i\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(1j\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(2a\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(2f\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(2g\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3b\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3d\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3e\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3g\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3h\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3i\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3j\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3k\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3l\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3m\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3n\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3o\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.2\(3p\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(1.230097\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(1.230124\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(1.230138\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.230207\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.230270\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240002\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240009\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240037\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240053\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240077\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240090\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.240107\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250016\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250021\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250022\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250037\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250045\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(2.250063\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(3.240022\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(3.240041\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(3.240043\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(4.240142\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(4.240152\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(4.241014\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(4.241063\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(4.242028\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(4.242038\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(4.242066\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(4.252001\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(4.252002\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(5.240021\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(5.250001\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(5.250030\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(5.250033\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(5.250043\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(5.250045\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250039\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250040\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250044\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250053\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250060\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250101\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(6.250117\):::::::* cpe:2.3:a:cisco:unified_computing_system:4.3\(6.260003\):::::::* cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250127\):::::::* cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250130\):::::::* cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250131\):::::::* cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250174\):::::::* cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250192\):::::::* cpe:2.3:a:cisco:unified_computing_system:6.0\(1.250194\):::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.0.0:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.1.0:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.2.1:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.2.2:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.3.1:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.3.2:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.3.3:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.3.5:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.4.0:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.4.1:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:2.4.2:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.0.1:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.0.2:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.0:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.1:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.2:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.3:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.4:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.1.5:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.10:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.11.1:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.11.3:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.11.5:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.12.2:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.13.6:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.14:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.15.3:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.15:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.16.1:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.1:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.2:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.3:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.4:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.6:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.7:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:3.2.8:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.00:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.02:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.11.1:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.12.1:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.12.2:::::::* cpe:2.3:o:cisco:unified_computing_system_e-series_software:4.15.2:::::::*
Vendors & Products		Cisco unified Computing System E-series Software

Apr 3, 2026 10:15 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco enterprise Nfv Infrastructure Software Cisco unified Computing System Cisco unified Computing System Software
Vendors & Products		Cisco Cisco enterprise Nfv Infrastructure Software Cisco unified Computing System Cisco unified Computing System Software

Apr 1, 2026 11:45 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user. Cisco has assigned this vulnerability a Security Impact Rating (SIR) of High, rather than Medium as the score indicates, because additional security implications could occur once the attacker has become root.
Title		Cisco Integrated Management Controller Command Injection Vulnerability
Weaknesses		CWE-77
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`