Cisco Integrated Management Controller Supervisor, Cisco UCS Director and Cisco UCS Director Express for Big Data Trust Management Issue Vulnerabilities

🗓️ 26 Aug 2019 00:00:00Reported by China National Vulnerability DatabaseType

Trust management flaw in Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data enables remote CLI login.

Reporter	Title	Published	Views	Family All 20
zdt	Cisco UCS Director, Cisco Integrated Management Controller Supervisor - Multiple Vulnerabilities	29 Aug 201900:00	–	zdt
zdt	Cisco UCS Director Default scpuser Password Exploit	2 Sep 201900:00	–	zdt
BDU FSTEC	Cisco IMC Supervisor Account Privilege Bypass	30 Aug 201900:00	–	bdu_fstec
Circl	CVE-2019-1935	2 Sep 201915:56	–	circl
Cisco	Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability	21 Aug 201916:00	–	cisco
Tenable Nessus	Cisco UCS Director SCP User Default Credentials (cisco-sa-20190821-imcs-usercred)	11 Dec 201900:00	–	nessus
CVE	CVE-2019-1935	21 Aug 201918:25	–	cve
Cvelist	CVE-2019-1935 Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability	21 Aug 201918:25	–	cvelist
Exploit DB	Cisco UCS Director - default scpuser password (Metasploit)	3 Sep 201900:00	–	exploitdb
exploitpack	Cisco UCS Director_ Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilities	21 Aug 201900:00	–	exploitpack

Vulners

Node

cisco imc_supervisorRange2.2.0.0–2.2.0.6

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/154239/Cisco-UCS-IMC-Supervisor-Authentication-Bypass-Command-Injection.htmlttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-imcs-usercred

28 Nov 2019 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.83386

SSVC