CVE-2014-8003
HighSummary
Cisco Integrated Management Controller in Cisco Unified Computing System 2.2(2c)A and earlier allows local users to obtain shell access via a crafted map-nfs command.
Risk Assessment
This vulnerability may allow local users unauthorized access to the system, posing a risk of device takeover.
Recommendation
It is recommended to update to the latest version of Cisco Unified Computing System to mitigate this vulnerability.
Other vulnerabilities in Cisco Integrated Management Controller
See all- CVE-2026-20288Medium
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying OS and elevate privileges to root. This is due to improper input validation, and exploitation involves entering crafted inputs. Successful exploitation allows command execution as root.
- CVE-2026-20198Medium
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user. This is due to insufficient input validation, and exploitation involves persuading a user to click a crafted link. Successful exploitation could allow arbitrary script execution in the user's browser or access to sensitive browser-based information.
Original NVD description (English source)
Cisco Integrated Management Controller in Cisco Unified Computing System 2.2(2c)A and earlier allows local users to obtain shell access via a crafted map-nfs command, aka Bug ID CSCup05998.