Default credentials

🗓️ 21 Aug 2019 19:15:00Reported by PRIOn knowledge baseType

A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data allows unauthenticated remote login using default credential

Reporter	Title	Published	Views	Family All 18
0day.today	Cisco UCS Director, Cisco Integrated Management Controller Supervisor - Multiple Vulnerabilities	29 Aug 201900:00	–	zdt
0day.today	Cisco UCS Director Default scpuser Password Exploit	2 Sep 201900:00	–	zdt
BDU FSTEC	The vulnerability of the Supervisor component of the Cisco Integrated Management Controller (IMC), as well as the physical infrastructure management tools and Cisco UCS Director and Cisco UCS Director Express for Big Data virtual environments, is related to the existence of a standard account with an undocumented password and incorrect access rights settings for this account. This allows an attacker to gain access to the command-line interface of the target system with administrator privileges.	30 Aug 201900:00	–	bdu_fstec
Circl	CVE-2019-1935	2 Sep 201915:56	–	circl
Cisco	Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability	21 Aug 201916:00	–	cisco
Tenable Nessus	Cisco UCS Director SCP User Default Credentials (cisco-sa-20190821-imcs-usercred)	11 Dec 201900:00	–	nessus
CNVD	Cisco Integrated Management Controller Supervisor, Cisco UCS Director and Cisco UCS Director Express for Big Data Trust Management Issue Vulnerabilities	26 Aug 201900:00	–	cnvd
CVE	CVE-2019-1935	21 Aug 201918:25	–	cve
Cvelist	CVE-2019-1935 Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability	21 Aug 201918:25	–	cvelist
Exploit DB	Cisco UCS Director - default scpuser password (Metasploit)	3 Sep 201900:00	–	exploitdb

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-imcs-usercred
seclists	www.seclists.org/bugtraq/2019/Aug/49
packetstormsecurity	www.packetstormsecurity.com/files/154239/Cisco-UCS-IMC-Supervisor-Authentication-Bypass-Command-Injection.html
seclists	www.seclists.org/fulldisclosure/2019/Aug/36
packetstormsecurity	www.packetstormsecurity.com/files/154305/Cisco-UCS-Director-Default-scpuser-Password.html

31 Mar 2023 15:57Current

9.7High risk

Vulners AI Score9.7

EPSS0.88998