Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Input Validation Error Vulnerability

🗓️ 26 Aug 2019 00:00:00Reported by China National Vulnerability DatabaseType

Input validation error in IMC Supervisor, UCS Director, and UCS Director Express for Big Data enables remote root command execution via the web interface.

Reporter	Title	Published	Views	Family All 18
0day.today	Cisco UCS Director, Cisco Integrated Management Controller Supervisor - Multiple Vulnerabilities	29 Aug 201900:00	–	zdt
0day.today	Cisco UCS Director Unauthenticated Remote Code Execution Exploit	2 Sep 201900:00	–	zdt
BDU FSTEC	The vulnerability affects the Cisco Integrated Management Controller (IMC) Supervisor web interface, as well as tools for managing physical infrastructure and virtual environments from Cisco UCS Director and Cisco UCS Director Express for Big Data. This allows attackers to execute arbitrary commands.	19 Sep 201900:00	–	bdu_fstec
Circl	CVE-2019-1936	2 Sep 201915:56	–	circl
Cisco	Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Command Injection Vulnerability	21 Aug 201916:00	–	cisco
Tenable Nessus	Cisco UCS Director Authentication Bypass (cisco-sa-20190821-imcs-ucs-cmdinj)	24 Sep 201900:00	–	nessus
Check Point Advisories	Cisco IMC Supervisor and Cisco UCS Director Command Injection (CVE-2019-1936)	18 Sep 201900:00	–	checkpoint_advisories
CVE	CVE-2019-1936	21 Aug 201918:25	–	cve
Cvelist	CVE-2019-1936 Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Command Injection Vulnerability	21 Aug 201918:25	–	cvelist
exploitpack	Cisco UCS Director_ Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilities	21 Aug 201900:00	–	exploitpack

Vulners

Node

cisco imc_supervisorRange2.2.0.0–2.2.0.6

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/154239/Cisco-UCS-IMC-Supervisor-Authentication-Bypass-Command-Injection.htmlhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-imcs-ucs-cmdinj

28 Nov 2019 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.2

CVSS 29

CVSS 37.2

EPSS0.39475

SSVC