CVE-2019-1628: fallo de gravedad media en Cisco Unified Computing System (Management…
Cisco Integrated Management Controller Denial of Service Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.5epss 0.4%
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checking. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected system. An exploit could allow the attacker to cause a buffer overflow, resulting in a process crash and DoS condition on the device.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Productos afectados
Cisco · Cisco Unified Computing System (Management Software)CVEs relacionadas — Cisco Unified Computing System (Management…
En el mismo producto, de las más peligrosas a las menos.
CVE-2019-1885HIGHCisco Integrated Management Controller Command Injection VulnerabilityEPSS 3.8%CVE-2019-1871HIGHCisco Integrated Management Controller Buffer Overflow VulnerabilityEPSS 3.3%CVE-2019-1631MEDIUMCisco Integrated Management Controller Information Disclosure VulnerabilityEPSS 2.2%CVE-2019-1908HIGHCisco Integrated Management Controller Information Disclosure VulnerabilityEPSS 2.0%CVE-2020-3241MEDIUMCisco UCS Director Path Traversal VulnerabilityEPSS 2.0%CVE-2019-1900HIGHCisco Integrated Management Controller Unauthenticated Denial of Service VulnerabilityEPSS 1.9%