CVE-2017-6604

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-07 · updated 2026-06-17
Weakness: CWE-601

Description

A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability affects the following Cisco products running Cisco IMC Software: Unified Computing System (UCS) B-Series M3 and M4 Blade Servers, Unified Computing System (UCS) C-Series M3 and M4 Rack Servers. More Information: CSCvc37931. Known Affected Releases: 3.1(2c)B.

Affected products

Cisco Unified Computing System (Managed): 2.2(8b), 3.0(1c), 3.1(2c)b

References

http://www.securityfocus.com/bid/97457
http://www.securitytracker.com/id/1038186
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cimc
http://www.securityfocus.com/bid/97457
http://www.securitytracker.com/id/1038186
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cimc

Get alerted when CVE-2017-6604 or the next vulnerability affects your stack