A serious security vulnerability exists in Cisco Integrated Management Controller (IMC) which can be used by an attacker to elevate privileges to root. The company has issued a warning about the vulnerability and acknowledged the availability of proof-of-concept exploit code for it. The high severity warning is accompanied by the release of patches, as well as a note that there is no workaround other than a software update. See also: The vulnerability has a CVSS score of 8.8, and Cisco says of it: “A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local… [Continue Reading]
