InfoSecBulletin Cybersecurity for mankind
Cisco has issued security advisories for vulnerabilities in the Cisco integrated management controller. These vulnerabilities could allow a remote cyber threat actor to gain control of a compromised system.
Cisco Integrated Management Controller CLI Command Injection Vulnerability:
US introduces Cyber Trust Mark for smart devices
CISA warns of critical Oracle, Mitel flaws active exploitation
Best Cybersecurity Certifications for Your Career in 2025
CVE-2024-40766
48,000+ Vulnerable SonicWall Devices exposed to ransomware attack
India releases draft Digital Personal Data Protection Rules
Microsoft to invest $80 Billion in AI Data Center
City Bank Customer financial reports posted dark market for sale
3.3 Million Email Server Expose User Passwords and Messages in Plain Text
Memory-Dump-UEFI
Researcher dumping memory to bypass BitLocker on Windows 11
CVE-2024-49112
PoC Exploit Released for Zero-Click vulnerability in Windows
A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or higher privileges on an affected device.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted CLI command. A successful exploit could allow the attacker to elevate privileges to root.
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root.
This vulnerability is due to insufficient user input validation. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to elevate their privileges to root.
Users and administrators are encouraged to review the following advisories and apply the necessary updates.
