{ "document" : { "aggregate_severity" : { "text" : "hoch" }, "category" : "csaf_base", "csaf_version" : "2.0", "distribution" : { "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "de-DE", "notes" : [ { "category" : "legal_disclaimer", "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen." }, { "category" : "description", "text" : "Der Cisco Integrated Management Controller ist eine Serververwaltung für mehrere Cisco-Produkte.\r\nCisco Secure Endpoint bietet Virenschutz und erweiterte Endpunkt-Erkennung und -Reaktion.\r\nDas Cisco Secure Firewall Management Center ist eine zentralisierte Plattform, die eine Verwaltung und Überwachung von Cisco Firewall-Geräten ermöglicht.\r\nCisco Secure Network Server bietet Dienste zur Identitäts- und Zugriffsverwaltung.", "title" : "Produktbeschreibung" }, { "category" : "summary", "text" : "Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Cisco Integrated Management Controller ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen oder beliebigen Code mit Root-Rechten auszuführen.", "title" : "Angriff" }, { "category" : "general", "text" : "- BIOS/Firmware\n- CISCO Appliance", "title" : "Betroffene Betriebssysteme" } ], "publisher" : { "category" : "other", "contact_details" : "csaf-provider@cert-bund.de", "name" : "Bundesamt für Sicherheit in der Informationstechnik", "namespace" : "https://www.bsi.bund.de" }, "references" : [ { "category" : "self", "summary" : "WID-SEC-W-2026-2673 - CSAF Version", "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2673.json" }, { "category" : "self", "summary" : "WID-SEC-2026-2673 - Portal Version", "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2673" }, { "category" : "external", "summary" : "Cisco Security Advisory cisco-sa-cimc-arg-inject-upSHdMfU vom 2026-08-05", "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-arg-inject-upSHdMfU" }, { "category" : "external", "summary" : "Cisco Security Advisory cisco-sa-cimc-xss-7EhBFxBp vom 2026-08-05", "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-7EhBFxBp" } ], "source_lang" : "en-US", "title" : "Cisco Integrated Management Controller: Mehrere Schwachstellen", "tracking" : { "current_release_date" : "2026-08-05T22:00:00.000+00:00", "generator" : { "date" : "2026-08-06T11:46:10.911+00:00", "engine" : { "name" : "BSI-WID", "version" : "1.6.0" } }, "id" : "WID-SEC-W-2026-2673", "initial_release_date" : "2026-08-05T22:00:00.000+00:00", "revision_history" : [ { "date" : "2026-08-05T22:00:00.000+00:00", "number" : "1", "summary" : "Initiale Fassung" } ], "status" : "final", "version" : "1" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_version_range", "name" : "Enterprise NFV Infrastructure Software ENCS <4.12.8", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software ENCS <4.12.8", "product_id" : "T057608" } }, { "category" : "product_version", "name" : "Enterprise NFV Infrastructure Software ENCS 4.12.8", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software ENCS 4.12.8", "product_id" : "T057608-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:enterprise_nfv_infrastructure_software_encs__4.12.8" } } }, { "category" : "product_version_range", "name" : "Enterprise NFV Infrastructure Software ENCS <4.15.6", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software ENCS <4.15.6", "product_id" : "T057609" } }, { "category" : "product_version", "name" : "Enterprise NFV Infrastructure Software ENCS 4.15.6", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software ENCS 4.15.6", "product_id" : "T057609-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:enterprise_nfv_infrastructure_software_encs__4.15.6" } } }, { "category" : "product_version_range", "name" : "Enterprise NFV Infrastructure Software uCPE <4.12.8", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software uCPE <4.12.8", "product_id" : "T057610" } }, { "category" : "product_version", "name" : "Enterprise NFV Infrastructure Software uCPE 4.12.8", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software uCPE 4.12.8", "product_id" : "T057610-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:enterprise_nfv_infrastructure_software_ucpe__4.12.8" } } }, { "category" : "product_version_range", "name" : "Enterprise NFV Infrastructure Software uCPE <4.15.6", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software uCPE <4.15.6", "product_id" : "T057611" } }, { "category" : "product_version", "name" : "Enterprise NFV Infrastructure Software uCPE 4.15.6", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software uCPE 4.15.6", "product_id" : "T057611-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:enterprise_nfv_infrastructure_software_ucpe__4.15.6" } } }, { "category" : "product_version_range", "name" : "Enterprise NFV Infrastructure Software uCPE <4.18.5", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software uCPE <4.18.5", "product_id" : "T057612" } }, { "category" : "product_version", "name" : "Enterprise NFV Infrastructure Software uCPE 4.18.5", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software uCPE 4.18.5", "product_id" : "T057612-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:enterprise_nfv_infrastructure_software_ucpe__4.18.5" } } }, { "category" : "product_version_range", "name" : "Enterprise NFV Infrastructure Software uCPE <26.1.2", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software uCPE <26.1.2", "product_id" : "T057613" } }, { "category" : "product_version", "name" : "Enterprise NFV Infrastructure Software uCPE 26.1.2", "product" : { "name" : "Cisco Integrated Management Controller Enterprise NFV Infrastructure Software uCPE 26.1.2", "product_id" : "T057613-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:enterprise_nfv_infrastructure_software_ucpe__26.1.2" } } }, { "category" : "product_version_range", "name" : "UCS C-Series M5 Rack Server <4.2(3r)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M5 Rack Server <4.2(3r)", "product_id" : "T057614" } }, { "category" : "product_version", "name" : "UCS C-Series M5 Rack Server 4.2(3r)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M5 Rack Server 4.2(3r)", "product_id" : "T057614-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_c-series_m5_rack_server___4.2%25283r%2529" } } }, { "category" : "product_version_range", "name" : "UCS C-Series M5 Rack Server <4.3(2.260020)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M5 Rack Server <4.3(2.260020)", "product_id" : "T057615" } }, { "category" : "product_version", "name" : "UCS C-Series M5 Rack Server 4.3(2.260020)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M5 Rack Server 4.3(2.260020)", "product_id" : "T057615-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_c-series_m5_rack_server___4.3%25282.260020%2529" } } }, { "category" : "product_version_range", "name" : "UCS C-Series M6 Rack Server <4.2(3r)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M6 Rack Server <4.2(3r)", "product_id" : "T057616" } }, { "category" : "product_version", "name" : "UCS C-Series M6 Rack Server 4.2(3r)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M6 Rack Server 4.2(3r)", "product_id" : "T057616-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_c-series_m6_rack_server__4.2%25283r%2529" } } }, { "category" : "product_version_range", "name" : "UCS C-Series M6 Rack Server <4.3(6.260054)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M6 Rack Server <4.3(6.260054)", "product_id" : "T057617" } }, { "category" : "product_version", "name" : "UCS C-Series M6 Rack Server 4.3(6.260054)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M6 Rack Server 4.3(6.260054)", "product_id" : "T057617-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_c-series_m6_rack_server__4.3%25286.260054%2529" } } }, { "category" : "product_version_range", "name" : "UCS C-Series M6 Rack Server <6.0(2.260143)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M6 Rack Server <6.0(2.260143)", "product_id" : "T057618" } }, { "category" : "product_version", "name" : "UCS C-Series M6 Rack Server 6.0(2.260143)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M6 Rack Server 6.0(2.260143)", "product_id" : "T057618-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_c-series_m6_rack_server__6.0%25282.260143%2529" } } }, { "category" : "product_version_range", "name" : "UCS C-Series M7 and M8 Rack Server <4.3(6.260033)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M7 and M8 Rack Server <4.3(6.260033)", "product_id" : "T057619" } }, { "category" : "product_version", "name" : "UCS C-Series M7 and M8 Rack Server 4.3(6.260033)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M7 and M8 Rack Server 4.3(6.260033)", "product_id" : "T057619-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_c-series_m7_and_m8_rack_server__4.3%25286.260033%2529" } } }, { "category" : "product_version_range", "name" : "UCS C-Series M7 and M8 Rack Server <4.3(6.260054)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M7 and M8 Rack Server <4.3(6.260054)", "product_id" : "T057620" } }, { "category" : "product_version", "name" : "UCS C-Series M7 and M8 Rack Server 4.3(6.260054)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M7 and M8 Rack Server 4.3(6.260054)", "product_id" : "T057620-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_c-series_m7_and_m8_rack_server__4.3%25286.260054%2529" } } }, { "category" : "product_version_range", "name" : "UCS C-Series M7 and M8 Rack Server <6.0(2.260044)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M7 and M8 Rack Server <6.0(2.260044)", "product_id" : "T057621" } }, { "category" : "product_version", "name" : "UCS C-Series M7 and M8 Rack Server 6.0(2.260044)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M7 and M8 Rack Server 6.0(2.260044)", "product_id" : "T057621-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_c-series_m7_and_m8_rack_server__6.0%25282.260044%2529" } } }, { "category" : "product_version_range", "name" : "UCS C-Series M7 and M8 Rack Server <6.0(2.260143)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M7 and M8 Rack Server <6.0(2.260143)", "product_id" : "T057622" } }, { "category" : "product_version", "name" : "UCS C-Series M7 and M8 Rack Server 6.0(2.260143)", "product" : { "name" : "Cisco Integrated Management Controller UCS C-Series M7 and M8 Rack Server 6.0(2.260143)", "product_id" : "T057622-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_c-series_m7_and_m8_rack_server__6.0%25282.260143%2529" } } }, { "category" : "product_version_range", "name" : "UCS E-Series M3 <3.2.18.1", "product" : { "name" : "Cisco Integrated Management Controller UCS E-Series M3 <3.2.18.1", "product_id" : "T057623" } }, { "category" : "product_version", "name" : "UCS E-Series M3 3.2.18.1", "product" : { "name" : "Cisco Integrated Management Controller UCS E-Series M3 3.2.18.1", "product_id" : "T057623-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_e-series_m3__3.2.18.1" } } }, { "category" : "product_version_range", "name" : "UCS E-Series M6 <4.15.4", "product" : { "name" : "Cisco Integrated Management Controller UCS E-Series M6 <4.15.4", "product_id" : "T057624" } }, { "category" : "product_version", "name" : "UCS E-Series M6 4.15.4", "product" : { "name" : "Cisco Integrated Management Controller UCS E-Series M6 4.15.4", "product_id" : "T057624-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_e-series_m6__4.15.4" } } }, { "category" : "product_version_range", "name" : "UCS S-Series Storage Server <4.3(6.260054)", "product" : { "name" : "Cisco Integrated Management Controller UCS S-Series Storage Server <4.3(6.260054)", "product_id" : "T057625" } }, { "category" : "product_version", "name" : "UCS S-Series Storage Server 4.3(6.260054)", "product" : { "name" : "Cisco Integrated Management Controller UCS S-Series Storage Server 4.3(6.260054)", "product_id" : "T057625-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:integrated_management_controller:ucs_s-series_storage_server__4.3%25286.260054%2529" } } } ], "category" : "product_name", "name" : "Integrated Management Controller" }, { "branches" : [ { "category" : "product_version_range", "name" : "Private Cloud Appliances <4.3(2.260020) (M5)", "product" : { "name" : "Cisco Secure Endpoint Private Cloud Appliances <4.3(2.260020) (M5)", "product_id" : "T057626" } }, { "category" : "product_version", "name" : "Private Cloud Appliances 4.3(2.260020) (M5)", "product" : { "name" : "Cisco Secure Endpoint Private Cloud Appliances 4.3(2.260020) (M5)", "product_id" : "T057626-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:secure_endpoint:private_cloud_appliances__4.3%25282.260020%2529_%2528m5%2529" } } }, { "category" : "product_version_range", "name" : "Private Cloud Appliances <4.3(6.260054) (M6)", "product" : { "name" : "Cisco Secure Endpoint Private Cloud Appliances <4.3(6.260054) (M6)", "product_id" : "T057627" } }, { "category" : "product_version", "name" : "Private Cloud Appliances 4.3(6.260054) (M6)", "product" : { "name" : "Cisco Secure Endpoint Private Cloud Appliances 4.3(6.260054) (M6)", "product_id" : "T057627-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:secure_endpoint:private_cloud_appliances__4.3%25286.260054%2529_%2528m6%2529" } } } ], "category" : "product_name", "name" : "Secure Endpoint" }, { "branches" : [ { "category" : "product_version_range", "name" : "Appliances <4.3(2.260020) (M5)", "product" : { "name" : "Cisco Secure Firewall Management Center Appliances <4.3(2.260020) (M5)", "product_id" : "T057628" } }, { "category" : "product_version", "name" : "Appliances 4.3(2.260020) (M5)", "product" : { "name" : "Cisco Secure Firewall Management Center Appliances 4.3(2.260020) (M5)", "product_id" : "T057628-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:secure_firewall_management_center:appliances__4.3%25282.260020%2529_%2528m5%2529" } } }, { "category" : "product_version_range", "name" : "Appliances <6.0(2.260143) (M6, M8)", "product" : { "name" : "Cisco Secure Firewall Management Center Appliances <6.0(2.260143) (M6, M8)", "product_id" : "T057630" } }, { "category" : "product_version", "name" : "Appliances 6.0(2.260143) (M6, M8)", "product" : { "name" : "Cisco Secure Firewall Management Center Appliances 6.0(2.260143) (M6, M8)", "product_id" : "T057630-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:cisco:secure_firewall_management_center:appliances__6.0%25282.260143%2529_%2528m6_m8%2529" } } } ], "category" : "product_name", "name" : "Secure Firewall Management Center" }, { "branches" : [ { "category" : "product_version_range", "name" : "Appliances <4.3(2.260020) (M5)", "product" : { "name" : "Cisco Secure Network Server Appliances <4.3(2.260020) (M5)", "product_id" : "T057631" } }, { "category" : "product_version", "name" : "Appliances 4.3(2.260020) (M5)", "product" : { "name" : "Cisco Secure Network Server Appliances 4.3(2.260020) (M5)", "product_id" : "T057631-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:cisco:secure_network_server:appliances__4.3%25282.260020%2529_%2528m5%2529" } } }, { "category" : "product_version_range", "name" : "Appliances <6.0(2.260143) (M6, M8)", "product" : { "name" : "Cisco Secure Network Server Appliances <6.0(2.260143) (M6, M8)", "product_id" : "T057633" } }, { "category" : "product_version", "name" : "Appliances 6.0(2.260143) (M6, M8)", "product" : { "name" : "Cisco Secure Network Server Appliances 6.0(2.260143) (M6, M8)", "product_id" : "T057633-fixed", "product_identification_helper" : { "cpe" : "cpe:/h:cisco:secure_network_server:appliances__6.0%25282.260143%2529_%2528m6_m8%2529" } } } ], "category" : "product_name", "name" : "Secure Network Server" } ], "category" : "vendor", "name" : "Cisco" } ] }, "vulnerabilities" : [ { "cve" : "CVE-2026-20198", "product_status" : { "known_affected" : [ "T057611", "T057633", "T057612", "T057623", "T057613", "T057624", "T057614", "T057625", "T057615", "T057626", "T057616", "T057627", "T057617", "T057628", "T057618", "T057630", "T057631", "T057610", "T057608", "T057609" ] }, "release_date" : "2026-08-05T22:00:00.000+00:00", "title" : "CVE-2026-20198" }, { "cve" : "CVE-2026-20200", "product_status" : { "known_affected" : [ "T057633", "T057627", "T057628", "T057619", "T057630", "T057631", "T057621" ] }, "release_date" : "2026-08-05T22:00:00.000+00:00", "title" : "CVE-2026-20200" }, { "cve" : "CVE-2026-20288", "product_status" : { "known_affected" : [ "T057611", "T057622", "T057633", "T057612", "T057623", "T057613", "T057624", "T057614", "T057625", "T057615", "T057626", "T057616", "T057627", "T057617", "T057628", "T057618", "T057630", "T057620", "T057631", "T057621", "T057610", "T057619", "T057608", "T057609" ] }, "release_date" : "2026-08-05T22:00:00.000+00:00", "title" : "CVE-2026-20288" } ] }