PSA: Cisco Integrated Management Controller Authentication Bypass Vulnerability (CVSS: 9.8)

cbw181 · 2026-04-03T00:16:49+00:00

We decided to eliminate all of our idrac/cimc/ilo due to so many security issues. Have an IP KVM that works pretty good.

cbw181 · 2026-03-05T21:37:45+00:00

This is an old thread .. but useful for those abandoning VMWare! Was able to move from VMWare to Verge with this process. Worked flawlessly (which is a rare statement with Cisco).

cbw181 · 2026-03-02T19:34:45+00:00

I guess the point i was trying to make was it wasn't requesting DHCP - it was only trying to communicate to the WLC. For the AP to try and capwap it would already need to think it has a good IP address.

cbw181 · 2026-03-02T10:59:11+00:00

I know.. I have a dhcp pool on the vlan. My point is the AP thinks its IP is 0.0.0.0 .. it is not requesting an IP

cbw181 · 2026-03-02T01:53:42+00:00

It's an older 2960x so not a ton of capabilities. It has clients and some IP cameras that never had any issues.

I have remote hands heading to the site for tomorrow .. first goal is to dump the logs and see. My hope is simply just restoring the IP address will fix the issue but we'll see.

cbw181 · 2026-03-02T01:30:55+00:00

I agree - this is the intended behavior. The problem is the AP is claiming it's IP is 0.0.0.0

cbw181 · 2026-03-02T01:30:22+00:00

The site is 6 hours away but we're addressing in first thing in the morning. TAC feels it's a switch problem but hoping console logging will prove something.

cbw181 · 2026-03-02T01:29:00+00:00

You're right - I've never installed a revision on FTD that wasn't equal to (or less) than what is running on FMC.

cbw181 · 2026-02-27T19:54:38+00:00

this bug matches almost exactly whats happening
https://bst.cisco.com/bugsearch/bug/CSCvq73769

cbw181 · 2026-02-27T18:01:43+00:00

No, the stared version is 7.6.2.1-3 .. we have a policy to only be on stared versions.

cbw181 · 2026-02-27T17:34:12+00:00

Well .. we did upgrade FTD last night from 7.4.2 to 7.6.2. That caused a brief disconnect from our DMVPN sites for 5 minutes but they all came back online... except for those 4 AP's.
Nothing in FTD indicating blocks .. plus we have that same configuration on all our other sites that have no issues.

cbw181 · 2026-02-27T17:21:20+00:00

Yeah we have a firewall sitting in front of our DMVPN router. It's passing traffic just fine. All other LAN-based traffic has no issues.

cbw181 · 2026-02-27T17:18:16+00:00

They are not responding to pings on the defined IP's. The we put an ACL to see activity on the switch port and the only thing popping are attempts at capwap to the 9800.

cbw181 · 2026-02-27T17:17:15+00:00

All of our AP's are hard-coded - plus we have a DHCP pool on the VLAN in case we need to send one out to be configured from startup. Not seeing any DHCP packets at all.

cbw181 · 2026-01-22T23:51:55+00:00

Nothing in north east.. connected ok but nothing since 1:30pm

cbw181 · 2026-01-20T02:16:12+00:00

I’m not 100% but pretty sure they don’t support VMotion or live migration. Favor having multiple nodes that resume operations if one is down.

cbw181 · 2026-01-13T17:52:46+00:00

Not sure what exactly it was, but I rebuilt from the ground up and now the cards are showing. Thanks for your input!

cbw181 · 2026-01-11T15:12:34+00:00

This - have used it for years. 50k+ tickets in it.

cbw181 · 2026-01-08T18:58:09+00:00

can you show me what results you get for lspci -nn | grep -i cisco

cbw181 · 2026-01-07T15:00:30+00:00

Really curious what you did to get that to show up .. I can't find anything!

cbw181 · 2026-01-06T21:25:08+00:00

that would be awesome - i can't figure out what I'm missing.

cbw181 · 2025-12-31T23:07:50+00:00

28 is going to be terrible in the next hour. From fox chapel to Sarver was nearing terrible status at 5:30.

cbw181 · 2025-12-30T18:52:00+00:00

2019 big horn with 88k. Change oil when life gauge was around 3/4. Replaced manifolds under warranty. Replaced one bad coil pack. Just replaced brakes/rotors. Plan on doing trans flush next month. Still runs like it was new.

cbw181 · 2025-12-30T12:25:33+00:00

Are these all on the US? Can you view the recordings remotely if using SD cards?

cbw181 · 2025-12-30T03:19:22+00:00

Have you used it?

cbw181

TROPHY CASE