Tracker / CVE-2021-1397
CVE-2021-1397
Media 4.7
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website. This vulnerability is known as an open redirect attack, which is used in phishing attacks to get users to visit malicious sites without their knowledge.
Prodotti e versioni affette
| cisco | c125_m5_firmware · … → 4.1\(2f\) |
|---|---|
| cisco | c220_m5_firmware · … → 4.1\(2f\) |
| cisco | c220_m6_firmware · … → 4.1\(2f\) |
| cisco | c225_m6_firmware · … → 4.1\(2f\) |
| cisco | c240_m5_firmware · … → 4.1\(2f\) |
| cisco | c240_m6_firmware · … → 4.1\(2f\) |
| cisco | c245_m6_firmware · … → 4.1\(2f\) |
| cisco | c480_m5_firmware · … → 4.1\(2f\) |
| cisco | c480_ml_m5_firmware · … → 4.1\(2f\) |
| cisco | encs_5100_firmware · … → 4.4.2 |
| cisco | encs_5400_firmware · … → 4.4.2 |
| cisco | integrated_management_controller · … → 3.2\(12.4\) |
| cisco | ucs-e1120d-m3_firmware · … → 3.2\(11.5\) |
| cisco | ucs-e140d_firmware · … → 3.2\(11.5\) |
| cisco | ucs-e140dp_firmware · … → 3.2\(11.5\) |
| cisco | ucs-e140s-m1_firmware · … → 3.2\(11.5\) |
| cisco | ucs-e140s-m2_firmware · … → 3.2\(11.5\) |
| cisco | ucs-e140s_firmware · … → 3.2\(11.5\) |
| cisco | ucs-e160d_firmware · … → 3.2\(11.5\) |
| cisco | ucs-e160dp-m1_firmware · … → 3.2\(11.5\) |
| cisco | ucs-e160s-m3_firmware · … → 3.2\(11.5\) |
| cisco | ucs-e180d-m2_firmware · … → 3.2\(11.5\) |
| cisco | ucs-e180d-m3_firmware · … → 3.2\(11.5\) |
| cisco | ucs_manager · … → 4.1\(3b\) |
| cisco | ucs_s3260_firmware · … → 4.0\(2o\) |
Analisi
Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.