Cisco IMC Command Injection Vulnerability Under Active Attack

An attacker with read-only or higher privileges on a Cisco Integrated Management Controller (IMC) can exploit a command injection vulnerability (CVE-2024-20295) to gain full control (root access) of the underlying operating system.  The vulnerability exists due to insufficient validation of user-supplied input on the IMC CLI and there are no workarounds available, but software updates […]

The post Cisco IMC Command Injection Vulnerability Under Active Attack appeared first on Cyber Security News.

access attack attacker can cisco cli command command injection command injection vulnerability control controller cve cve-2024 exploit higher injection input management network security operating system privileges root root access system under validation vulnerability workarounds