CVE-2020-26063 is an improper authorization vulnerability in Cisco Integrated Management Controller API endpoints. An authenticated, remote attacker can bypass authorization checks to download files or modify limited configuration options on affected systems. The vulnerability has a CVSS score of 5.4 (Medium), indicating a low attack complexity and requiring low privileges for exploitation, with potential for limited confidentiality and integrity impact. There are no known workarounds. Currently, there is no evidence of active exploitation, nor is public exploit code available (e.g., Metasploit, Nuclei, ExploitDB). Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Cisco | Cisco Unified Computing System (Managed) | 3.2(1d), 3.2(2b), 3.2(2c), 3.2(2d), 3.2(2e), 3.2(2f), 3.2(3a), 3.2(3b), 3.2(3d), 3.2(3e), 3.2(3g), 3.2(3h), 3.2(3i), 3.2(3j), 3.2(3k), 3.2(3l), 3.2(3n), 3.2(3o), 3.2(3p), 4.0(1a), 4.0(1b), 4.0(1c), 4.0(1d), 4.0(2a), 4.0(2b), 4.0(2d), 4.0(2e), 4.0(4a), 4.0(4b), 4.0(4c), 4.0(4d), 4.0(4e), 4.0(4f), 4.0(4g), 4.0(4h), 4.0(4i), 4.1(1a), 4.1(1b), 4.1(1c), 4.1(1d), 4.1(1e), 4.1(2a), 4.1(2b)CNA affecteddefault unknown |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.