Cisco IMC Command Injection Vulnerability Under Active Attack

An attacker with read-only or higher privileges on a Cisco Integrated Management Controller (IMC) can exploit a command injection vulnerability (CVE-2024-20295) to gain full control (root access) of the underlying operating system.  The vulnerability exists due to insufficient validation of user-supplied input on the IMC CLI and there are no workarounds available, but software updates […]

The post Cisco IMC Command Injection Vulnerability Under Active Attack appeared first on Cyber Security News.

access attack attacker can cisco cisco imc vulnerability cli command command injection command injection attack command injection vulnerability control controller cve cve-2024 exploit higher injection input management network security network security updates operating system privileges root root access system under validation vulnerability workarounds