CVE-2019-1628

The CVE-2019-1628 issue affects Cisco Integrated Management Controller (IMC) web server. It's a numeric/buffer-overflow type vulnerability caused by incorrect bounds checking, exploitable by a crafted HTTP request from an authenticated, local attacker, leading to a process crash and DoS on the de...

CVE-2019-1879

CVE-2019-1879 affects Cisco Integrated Management Controller (IMC) CLI. The issue is due to insufficient validation of user-supplied input in CLI commands, allowing an authenticated local attacker to inject and execute arbitrary commands with root privileges. Exploitation requires admin authentic...

CVE-2019-1631

CVE-2019-1631 concerns Cisco’s Integrated Management Controller (IMC) Web UI. The vulnerability allows an unauthenticated, remote attacker to view sensitive system usage information due to inadequate data protection in the IMC web interface. An attacker can exploit this by sending a crafted HTTP ...

CVE-2019-1630

Cisco CVE-2019-1630 is a denial-of-service vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC). A local, authenticated attacker can trigger a buffer overflow by supplying a crafted file, potentially inhibiting an administrator’s access to the s...

CVE-2019-1632

The CVE-2019-1632 entry describes a CSRF vulnerability in Cisco Integrated Management Controller (IMC) where an authenticated remote attacker can cause arbitrary actions via the web-based management interface due to insufficient CSRF protections. Exploitation requires a user to follow a malicious...

CVE-2019-1629

The CVE-2019-1629 issue affects Cisco Integrated Management Controller (IMC) via the configuration import utility. It stems from a failure to delete temporarily uploaded files, allowing an unauthenticated, remote attacker to gain write access and upload arbitrary data to the filesystem. This coul...

CVE-2019-1627

CVE-2019-1627 : Cisco Integrated Management Controller (IMC) Server Utilities contain an information-disclosure vulnerability where an authenticated, remote attacker could download the configuration file due to insufficient protection of data in the configuration data. This could expose sensitive...

CVE-2018-15447

CVE-2018-15447 affects Cisco Integrated Management Controller (IMC) Supervisor. The vulnerability stems from inadequate validation of user-supplied input in SQL queries, allowing an unauthenticated, remote attacker to execute arbitrary SQL via crafted URLs to the affected web framework. Documente...