PT-2019-3057 · Cisco · Cisco Integrated Management Controller (Imc)

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC Software affected versions not specified Description: A vulnerability in the web-based management interface of the software could allow an authenticated, remote attacker to inject arbitrary commands...

PT-2019-3056 · Cisco · Cisco Integrated Management Controller (Imc)

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote...

CVE-2019-1935: Use of Hard-coded Credentials

A vulnerability in Cisco Integrated Management Controller IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account scpuser, which has default user...

CVE-2019-1883: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the command-line interface of Cisco Integrated Management Controller IMC could allow an authenticated, local attacker with read-only credentials to inject arbitrary commands that could allow them to obtain root privileges. The vulnerability is due to insufficient validation of...

CVE-2019-1864: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on an affected device. The vulnerability is due to insufficient validation...

CVE-2019-1634: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the Intelligent Platform Management Interface IPMI of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on the underlying operating system OS. The vulnerability is due to...

CVE-2019-12634: Missing Authentication for Critical Function

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a...

Cisco UCS Director_ Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilities

Cisco UCS Director Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilities Multiple critical vulnerabilities in Cisco UCS Director, Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data...

CVE-2019-1871: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to cause a denial of service DoS condition and implement arbitrary commands with root privileges on an affected device. The vulnerability is du...

PT-2019-3073

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC affected versions not specified Description The issue is caused by a buffer overflow in the memory due to improper bounds checking by the import-config process. This could allow a remote attacker to...

PT-2019-3071

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC affected versions not specified Description A vulnerability in the Intelligent Platform Management Interface IPMI of Cisco Integrated Management Controller IMC could allow an authenticated, remote...

PT-2019-3081

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Software affected versions not specified Description A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote...

PT-2019-3055

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC affected versions not specified Description The issue is related to improper handling of substring comparison operations in the web server of Cisco Integrated Management Controller IMC, allowing an...

CVE-2019-1974: Improper Authentication

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to bypass user authentication and gain access as an administrative user...

PT-2019-3021

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Supervisor versions affected versions not specified Cisco UCS Director versions affected versions not specified Cisco UCS Director Express for Big Data versions affected versions not specified...

PT-2019-3060

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller affected versions not specified Description A vulnerability in the Intelligent Platform Management Interface IPMI implementation could allow an unauthenticated, remote attacker to view sensitive system...

PT-2019-3072

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Software affected versions not specified Description A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote...

CVE-2019-1907: Improper Authorization

A vulnerability in the web server of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to set sensitive configuration values and gain elevated privileges. The vulnerability is due to improper handling of substring comparison operations that are performed by...

CVE-2019-1900: NULL Pointer Dereference

A vulnerability in the web server of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to cause the web server process to crash, causing a denial of service DoS condition on an affected system. The vulnerability is due to insufficient validation of...

CVE-2019-1896: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to inject arbitrary commands and obtain root privileges. The vulnerability is due to insufficient validation of user-supplied input in the Certificate...