CERT mailing list archives

Cisco Integrated Management Controller Vulnerability


From: "US-CERT" <US-CERT () ncas us-cert gov>
Date: Thu, 11 Sep 2014 12:13:14 -0500

NCCIC / US-CERT

National Cyber Awareness System:

Cisco Integrated Management Controller Vulnerability [ 
https://www.us-cert.gov/ncas/current-activity/2014/09/11/Cisco-Integrated-Management-Controller-Vulnerability ] 
09/11/2014 12:31 PM EDT 
Original release date: September 11, 2014

Cisco has released an advisory to address a vulnerability in the Cisco Integrated Management Controller (Cisco IMC) SSH 
module of the Cisco Unified Computing System E-Series Blade servers that could allow an unauthenticated, remote 
attacker to cause a denial of service condition. Migration to release 2.3.1 is available for Cisco IMC Software 
versions 1.0.1, 1.0.2, 2.1.0, and 2.2.0.

Users and administrators are encouraged to review the Cisco Advisory [ 
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140908-ucse ] and apply the necessary 
updates.

 

 

________________________________________________________________________

This product is provided subject to this Notification [ http://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ http://www.us-cert.gov/privacy/ ] policy.

________________________________________________________________________

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ] 

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ] 


Current thread: