Cisco Integrated Management Controller Denial of Service Vulnerability

A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient checking of an input buffer. An attacker could exploit this vulnerability by passing a crafted file to the affected system. A successful exploit could inhibit an administrator's ability to access the system.

N/A

内存缓冲区边界内操作的限制不恰当

Cisco Integrated Management Controller 缓冲区错误漏洞

Cisco Integrated Management Controller（IMC）是美国思科（Cisco）公司的一套用于对UCS（统一计算系统）进行管理的软件。该软件支持HTTP、SSH访问等，并可对服务器进行开机、关机和重启等操作。 Cisco IMC中的固件签名检查程序存在缓冲区错误漏洞。本地攻击者可借助特制的文件利用该漏洞造成管理员无法访问系统。

N/A

N/A