CVE-2019-1896: falha de alta gravidade em Cisco Unified Computing System E-Series…
Cisco Integrated Management Controller CSR Generation Command Injection Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 1.8%
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands and obtain root privileges. The vulnerability is due to insufficient validation of user-supplied input in the Certificate Signing Request (CSR) function of the web-based management interface. An attacker could exploit this vulnerability by submitting a crafted CSR in the web-based management interface. A successful exploit could allow an attacker with administrator privileges to execute arbitrary commands on the device with full root privileges.
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Unified Computing System E-Series Software (UCSE)CVEs relacionadas — Cisco Unified Computing System E-Series…
No mesmo produto, das mais perigosas para as menos.
CVE-2024-20356HIGHCVE-2024-20356EPSS 29.6%CVE-2018-0430—Cisco Integrated Management Controller Command Injection VulnerabilityEPSS 4.0%CVE-2018-0431—Cisco Integrated Management Controller Command Injection VulnerabilityEPSS 4.0%CVE-2019-1865HIGHCisco Integrated Management Controller Command Injection VulnerabilityEPSS 3.6%CVE-2019-1850HIGHCisco Integrated Management Controller Command Injection VulnerabilityEPSS 3.5%CVE-2019-1634HIGHCisco Integrated Management Controller Command Injection VulnerabilityEPSS 2.8%