CVE-2019-1908: fallo de gravedad alta en Cisco Unified Computing System (Management…
Cisco Integrated Management Controller Information Disclosure Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.5epss 2.0%
A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to view sensitive system information. The vulnerability is due to insufficient security restrictions imposed by the affected software. A successful exploit could allow the attacker to view sensitive information that belongs to other users. The attacker could then use this information to conduct additional attacks.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Cisco · Cisco Unified Computing System (Management Software)CVEs relacionadas — Cisco Unified Computing System (Management…
En el mismo producto, de las más peligrosas a las menos.
CVE-2019-1885HIGHCisco Integrated Management Controller Command Injection VulnerabilityEPSS 3.8%CVE-2019-1871HIGHCisco Integrated Management Controller Buffer Overflow VulnerabilityEPSS 3.3%CVE-2019-1631MEDIUMCisco Integrated Management Controller Information Disclosure VulnerabilityEPSS 2.2%CVE-2020-3241MEDIUMCisco UCS Director Path Traversal VulnerabilityEPSS 2.0%CVE-2019-1900HIGHCisco Integrated Management Controller Unauthenticated Denial of Service VulnerabilityEPSS 1.9%CVE-2019-1629MEDIUMCisco Integrated Management Controller Arbitrary File Write VulnerabilityEPSS 1.5%