CVE-2017-6618 describes a cross-site scripting (XSS) vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) version 3.0(1c). This flaw, caused by insufficient input validation, could allow an authenticated, remote attacker to execute arbitrary code in the context of the web interface by tricking a user into clicking a malicious link. Rated as Medium severity with a CVSS score of 5.4, the attack requires user interaction and authenticated access. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and the vulnerability shows minimal community discussion or media coverage, indicating it is not actively exploited.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.0\(1c\)CPE matchmatch criteria | cpe:2.3:a:cisco:integrated_management_controller_supervisor:3.0\(1c\):*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.