Cisco Warns of a Command Injection and Privilege Escalation Flaw in Its IMC
Cisco Warns of a Command Injection and Privilege Escalation Flaw in Its IMC
18 April 2024
A local, authenticated attacker can exploit the vulnerability, tracked as CVE-2024-20295, to conduct command injection attacks on the underlying operating system and elevate privileges to root.