The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) allows remote authenticated users to cause a denial of service (IP interface outage) via crafted parameters in an HTTP request, aka Bug ID CSCuv38286.Referenceshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-imchttp://www.securityfocus.com/bid/79031http://www.securitytracker.com/id/1038475http://www.securityfocus.com/bid/108851