Medium severity4.7NVD Advisory· Published May 6, 2021· Updated Jun 17, 2026

CVE-2021-1397

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website. This vulnerability is known as an open redirect attack, which is used in phishing attacks to get users to visit malicious sites without their knowledge.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Unified Computing System Integrated Management Controller
cpe:2.3:a:cisco:integrated_management_controller:*:*:*:*:*:*:*:*
Range: <3.2\(12.4\)
Cisco Systems, Inc./Ucs Manager
cpe:2.3:a:cisco:ucs_manager:*:*:*:*:*:*:*:*
Range: <=4.1\(3b\)
Cisco Systems, Inc./C125 M5 Firmware
cpe:2.3:o:cisco:c125_m5_firmware:*:*:*:*:*:*:*:*
Range: <=4.1\(2f\)
Cisco Systems, Inc./C220 M5 Firmware
cpe:2.3:o:cisco:c220_m5_firmware:*:*:*:*:*:*:*:*
Range: <=4.1\(2f\)
Cisco Systems, Inc./C220 M6 Firmware
cpe:2.3:o:cisco:c220_m6_firmware:*:*:*:*:*:*:*:*
Range: <=4.1\(2f\)
Cisco Systems, Inc./C225 M6 Firmware
cpe:2.3:o:cisco:c225_m6_firmware:*:*:*:*:*:*:*:*
Range: <=4.1\(2f\)
Cisco Systems, Inc./C240 M5 Firmware
cpe:2.3:o:cisco:c240_m5_firmware:*:*:*:*:*:*:*:*
Range: <=4.1\(2f\)
Cisco Systems, Inc./C240 M6 Firmware
cpe:2.3:o:cisco:c240_m6_firmware:*:*:*:*:*:*:*:*
Range: <=4.1\(2f\)
Cisco Systems, Inc./C245 M6 Firmware
cpe:2.3:o:cisco:c245_m6_firmware:*:*:*:*:*:*:*:*
Range: <=4.1\(2f\)
Cisco Systems, Inc./C480 M5 Firmware
cpe:2.3:o:cisco:c480_m5_firmware:*:*:*:*:*:*:*:*
Range: <=4.1\(2f\)
Cisco Systems, Inc./C480 ML M5 Firmware
cpe:2.3:o:cisco:c480_ml_m5_firmware:*:*:*:*:*:*:*:*
Range: <=4.1\(2f\)
Cisco Systems, Inc./Encs 5100 Firmware
cpe:2.3:o:cisco:encs_5100_firmware:*:*:*:*:*:*:*:*
Range: <=4.4.2
Cisco Systems, Inc./Encs 5400 Firmware
cpe:2.3:o:cisco:encs_5400_firmware:*:*:*:*:*:*:*:*
Range: <=4.4.2
Cisco Systems, Inc./Ucs E1120d M3 Firmware
cpe:2.3:o:cisco:ucs-e1120d-m3_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs E140d Firmware
cpe:2.3:o:cisco:ucs-e140d_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs E140dp Firmware
cpe:2.3:o:cisco:ucs-e140dp_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs E140s M1 Firmware
cpe:2.3:o:cisco:ucs-e140s-m1_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs E140s M2 Firmware
cpe:2.3:o:cisco:ucs-e140s-m2_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs E140s Firmware
cpe:2.3:o:cisco:ucs-e140s_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs E160d Firmware
cpe:2.3:o:cisco:ucs-e160d_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs E160dp M1 Firmware
cpe:2.3:o:cisco:ucs-e160dp-m1_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs E160s M3 Firmware
cpe:2.3:o:cisco:ucs-e160s-m3_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs E180d M2 Firmware
cpe:2.3:o:cisco:ucs-e180d-m2_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs E180d M3 Firmware
cpe:2.3:o:cisco:ucs-e180d-m3_firmware:*:*:*:*:*:*:*:*
Range: <=3.2\(11.5\)
Cisco Systems, Inc./Ucs S3260 Firmware
cpe:2.3:o:cisco:ucs_s3260_firmware:*:*:*:*:*:*:*:*
Range: <=4.0\(2o\)
Cisco Systems, Inc./Integrated Management Controller Softwarellm-fuzzy
Cisco Systems, Inc./Unified Computing Systemcpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imc-openred-zAYrU6d2nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000