CVE-2019-1634

CWE-78 — OS Command Injection5 documents5 sources
Severity
7.2HIGH
EPSS
1.5%
top 18.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Cisco Unified Computing System E-series Software (ucse)Cisco Integrated Management Controller SupervisorCisco Unified Computing System
Timeline
PublishedAug 21
Latest updateMay 24

Description

A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges on the underlying operating system (OS). The vulnerability is due to insufficient input validation of user-supplied commands. An attacker who has administrator privileges and access to the network where the IPMI resides could exploit this vulnerability by submitting…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-f3wx-h636-9qph: A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC) could allow an authenticated,↗2022-05-24
▶
CVEList
Cisco Integrated Management Controller Command Injection Vulnerability↗2019-08-21
▶

📋Vendor Advisories

1
Cisco
Cisco Integrated Management Controller Command Injection Vulnerability↗2019-08-21
▶

💬Community

1
Bugzilla
CVE-2019-17109 koji: remote directory traversal↗2019-11-05
▶