SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-1397

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

MEDIUM 6.1EPSS 0.83%

Does this matter?

Lower severity and a low EPSS score (0.83%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website. This vulnerability is known as an open redirect attack, which is used in phishing attacks to get users to visit malicious sites without their knowledge.

CVSS 3.1
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.83% probability · 56th percentile
CISA KEV
Not listed
Weakness
CWE-601
Affected
cisco/integrated management controller · cisco/ucs manager · cisco/encs 5100 firmware · cisco/encs 5400 firmware · cisco/c220 m6 firmware · cisco/c225 m6 firmware · cisco/c240 m6 firmware · cisco/c245 m6 firmware · cisco/c125 m5 firmware · cisco/c220 m5 firmware · cisco/c240 m5 firmware · cisco/c480 m5 firmware · cisco/c480 ml m5 firmware · cisco/ucs-e140s firmware · cisco/ucs-e140d firmware · cisco/ucs-e160d firmware · cisco/ucs-e160s-m3 firmware · cisco/ucs-e180d-m3 firmware · cisco/ucs-e1120d-m3 firmware · cisco/ucs-e140s-m2 firmware · +5 more
Source
psirt@cisco.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.